IP Entry criteria and actions.
-
An action to take, either 'Accept','Drop', or 'RateLimit'.
enum: "Drop", "Accept", "RateLimit" -
Destination port to match by name.
enum: "ACAP", "AFP-TCP", "ARNS", +164 more -
Destination port to match by numerical value.
range: 0 to 65535 -
Operator to use when matching destinationPort, either Equals, GreaterOrEquals, or LessOrEquals.
enum: "Equals", "GreaterOrEquals", "LessOrEquals" -
Range of destination ports to match, in the format n-m, e.g. 100-200, The start and end of the range must be port numbers.
-
Destination prefix to match.
-
Destination prefix set to match. Mutually exclusive with the Destination Prefix field.
-
Match DSCP values.
-
Match the first fragment only.
-
Match any fragment.
-
Match a specific ICMP code, as a number between 0-255, e.g. 0.
-
Match a specific ICMP type by name, e.g. dest-unreachable.
enum: "DestUnreachable", "Echo", "EchoReply", +22 more -
Match a specific ICMP type by number.
range: 0 to 255 -
Log the matches for this entry.
-
Match a specific IP protocol name (specified in the type field of the IP header).
enum: "AH", "EGP", "EIGRP", +24 more -
Match a specific IP protocol number (specified in the type field of the IP header).
range: 0 to 255 -
Rate limit to apply when the action is 'RateLimit'.
-
The maximum burst size in bytes.
format: int32 -
Controls policer instantiation: false for shared instance, true for per-entry instances
default: false -
The peak rate in kilobytes per second.
format: int32 -
Determines how the policer is applied across subinterfaces. Global applies the policer across all subinterfaces, while Subinterface applies it individually to each subinterface.
default: "Global"enum: "Global", "Subinterface"
-
-
Source port to match by name.
enum: "ACAP", "AFP-TCP", "ARNS", +164 more -
Source port to match by numerical value.
range: 0 to 65535 -
Operator to use when matching sourcePort, either Equals, GreaterOrEquals, or LessOrEquals.
enum: "Equals", "GreaterOrEquals", "LessOrEquals" -
Range of source ports to match, in the format n-m, e.g. 100-200. The start and end of the range must be port numbers.
-
Source prefix to match.
-
Source prefix set to match. Mutually exclusive with the Source Prefix field.
-
Match TCP flags, usable with !, &, | and the flags RST, SYN, and ACK.