diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/vpp/configuration/acl.rst | 10 |
1 files changed, 2 insertions, 8 deletions
diff --git a/docs/vpp/configuration/acl.rst b/docs/vpp/configuration/acl.rst index 1e32a2ab..9aaacb3a 100644 --- a/docs/vpp/configuration/acl.rst +++ b/docs/vpp/configuration/acl.rst @@ -136,16 +136,10 @@ For TCP protocol rules, you can match specific TCP flags: .. code-block:: none # Match packets with specific flags set - set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags ack - set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags fin - set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags psh - set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags rst - set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags syn - set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags urg + set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags is-set <ack|cwr|ecn|fin|psh|rst|syn|urg> # Match packets without specific flags set - set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags not ack - set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags not syn + set vpp acl ip tag-name <tag-name> rule <rule-number> tcp-flags is-not-set <ack|cwr|ecn|fin|psh|rst|syn|urg> IP ACL Configuration Examples ----------------------------- |