| firewall flows |
Notifies a session has been established |
| filter |
Optional. Defines additional firewall flow filter parameters |
| dir [wired-wired| wired-wireless| wireless-wired|
wireless-wireless] |
Optional. Matches the packet flow direction
- wired-wired – Wired to
wired flows
- wired-wireless – Wired
to wireless flows
- wireless-wired –
Wireless to wired flows
- wireless-wireless –
Wireless to wireless flows
|
| dst port <1-65535> |
Optional. Matches the destination port with the specified port
- port <1-65535> –
Specifies the destination port number from 1 - 65535
|
| ether [dst <MAC>| host <MAC>| src <MAC>| vlan
<1-4094>] |
Optional. Displays Ethernet filter options
- dst <MAC> –
Matches only the destination MAC address
- host <MAC> –
Matches flows containing the specified MAC address
- src <MAC> –
Matches only the source MAC address
- vlan <1-4094> –
Matches the VLAN number of the traffic with the specified value.
Specify a value from 1- 4094.
|
| flow-type [bridged|natted|routed| wired|wireless] |
Optional. Matches the traffic flow type
- bridged – Bridged
flows
- natted – Natted
flows
- routed – Routed
flows
- wired – Flows
belonging to wired hosts
- wireless – Flows
containing a mobile unit
|
| icmp {code|type} |
Optional. Matches flows with the specified Internet Control Message
Protocol (ICMP) version 4 code and type
- code – Matches flows
with the specified ICMPv4 code
- type – Matches flows
with the specified ICMPv4 type
|
| icmpv6 {code|type} |
Optional. Matches flows with the specified ICMP
version 6 code and type
- code – Optional. Matches flows with the specified ICMPv6 code
- type – Optional. Matches flows with the specified ICMPv6 type
|
| igmp |
Optional. Matches Internet Group Management Protocol (IGMP)
flows |
| ip [dst <IP>| host <IP>| proto <0-254>|
src <IP>] |
Optional. Filters firewall flows based on the IPv4 parameters passed
- dst <IP> –
Matches destination IP address
- host <IP> –
Matches flows containing IPv4 address
- proto <0-254> –
Matches the IPv4 protocol number with the specified number
- src <IPv4> –
Matches source IP address
|
| ipv6 [dst <IPv6>| host <IPv6>| proto
<0-254>| src <IPv6>] |
Optional. Filters firewall flows based on the
IPv6 parameters passed
- dst <IPv6> – Matches destination IPv6 address
- host <IPv6> – Matches flows containing IPv6 address
- proto <0-254> – Matches the IPv6 protocol number with the
specified number
- src <IPv6> – Matches source IPv6 address
|
| max-idle <1-4294967295> |
Optional. Filters firewall flows idle for at
least the specified duration. Specify a max-idle value from 1 - 4294967295
bytes. |
| min-bytes <1-4294967295> |
Optional. Filters firewall flows with at least
the specified number of bytes. Specify a min-bytes value from 1 - 4294967295
bytes. |
| min-idle <1-4294967295> |
Optional. Filters firewall flows idle for at
least the specified duration. Specify a min-idle value from 1 - 4294967295
bytes. |
| min-pkts <1-4294967295> |
Optional. Filters firewall flows with at least
the given number of packets. Specify a min-bytes value from 1 - 4294967295
bytes. |
| not |
Optional. Negates the filter expression
selected |
| port <1-65535> |
Optional. Matches either the source or
destination port. Specify a port from 1 - 65535. |
| src <1-65535> |
Optional. Matches only the source port with the
specified port. Specify a port from 1 - 65535. |
| tcp |
Optional. Matches TCP flows |
| udp |
Optional. Matches UDP flows |
