Feature Explorer AI AI

×

Subscribe now to get the Latest Updates

Watch a 2-minute overview video

Firewall filter match conditions

More Information:

Firewall filter match conditions

Each term in a firewall filter consists of match conditions and an action. Match conditions are the fields and values that a packet must contain to be considered a match.

Feature hierarchy Feature Name
Firewall filter match conditions / 20-bit flow-label field matching
Firewall filter match conditions / Additional numeric-range match conditions in firewall filters
Firewall filter match conditions / DSCP and Traffic Class firewall filter match conditions on the loopback interface
Firewall filter match conditions / Filter Match: DSCP and Forwarding Class at Loopback Interface
Firewall filter match conditions / Filter match: Any IP options (ip-options any)
Firewall filter match conditions / Filter match: Destination MAC address
Firewall filter match conditions / Filter match: Flexible Offset
Firewall filter match conditions / Filter match: GRE-key
Firewall filter match conditions / Filter match: IPv6 hop-limit
Firewall filter match conditions / Filter match: IPv6 next-header
Firewall filter match conditions / Filter match: Interfaces
Firewall filter match conditions / Filter match: MPLS: Header metadata: forwarding-class, loss-priority
Firewall filter match conditions / Filter match: MPLS: IPv4/IPv6 Payload
Firewall filter match conditions / Filter match: Packet Length
Firewall filter match conditions / Filter match: TCP/UDP port ranges
Firewall filter match conditions / Filter match: Tcp-flags: Bitwise operations: and
Firewall filter match conditions / Filter match: Tcp-flags: Logical operations: and
Firewall filter match conditions / Filter match: Tcp-flags: Logical operations: negate
Firewall filter match conditions / Filter match: Tcp-flags: Logical operations: or
Firewall filter match conditions / Filter match: first fragment
Firewall filter match conditions / Filter match: tcp-flags
Firewall filter match conditions / Filter match: tcp-flags: bitwise operations: negate
Firewall filter match conditions / Filter match: tcp-flags: bitwise operations: or
Firewall filter match conditions / Firewall family bridge match criteria for IPv6
Firewall filter match conditions / Firewall feature matching on gre-key
Firewall filter match conditions / Firewall filter match condition is Hop-Limit
Firewall filter match conditions / Firewall filter match condition support for IPv6 extension headers
Firewall filter match conditions / Firewall filter match condition support for additional ICMPv6 types
Firewall filter match conditions / Firewall filter match conditions based on IEEE 802.1p VLAN priority bits
Firewall filter match conditions / Firewall filter match conditions for Layer 2 bridging and VPLS
Firewall filter match conditions / Five tuple match conditions
Firewall filter match conditions / IPv6 filter: Fragmented packets
Firewall filter match conditions / IPv6 filter: Match ICMP values
Firewall filter match conditions / IPv6 filter: Match IPv6 packet length
Firewall filter match conditions / IPv6 filter: Match TCP flags
Firewall filter match conditions / IPv6 filter: Match Traffic Class field
Firewall filter match conditions / IPv6 filter: Match destination address
Firewall filter match conditions / IPv6 filter: Match destination address - Flow
Firewall filter match conditions / IPv6 filter: Match destination port
Firewall filter match conditions / IPv6 filter: Match destination port - Flow
Firewall filter match conditions / IPv6 filter: Match source address
Firewall filter match conditions / IPv6 filter: Match source address - Flow
Firewall filter match conditions / IPv6 filter: Match source port
Firewall filter match conditions / IPv6 filter: Match source port - Flow
Firewall filter match conditions / Match - MPLS Header - Bottom of Stack
Firewall filter match conditions / Match - MPLS Header - EXP
Firewall filter match conditions / Match - MPLS Header - Label
Firewall filter match conditions / Match - MPLS Header - TTL
Firewall filter match conditions / Match: Destination Class and Source Class
Firewall filter match conditions / Match: Hop-Limit
Firewall filter match conditions / Match: IPv4 and IPv6
Firewall filter match conditions / Match: Interface Group
Firewall filter match conditions / Match: L4 ports
Firewall filter match conditions / Match: MAC Address
Firewall filter match conditions / Match: Protocol
Firewall filter match conditions / Match: Source or destination ports in named list
Firewall filter match conditions / Match: isFragment
Firewall filter match conditions / Match: next-header (IPv6)
Firewall filter match conditions / Match: payload-protocol (IPv6)
Firewall filter match conditions / Matching IPv6 source addresses from an inet6 egress interface
Firewall filter match conditions / Multifield ingress queuing classifier filter