...
| Property | Description |
|---|---|
| disabled (no | yes; Default: no) | Enables or disables switch rule |
| dscp (integer: 0..63) | Matching DSCP field of the packet |
| dst-address (IP address/Mask) | Matching destination IP address and mask |
| dst-address6 (IPv6 address/Mask) | Matching destination IPv6 address and mask |
| dst-mac-address (MAC address/Mask) | Matching destination MAC address and mask |
| dst-port (integer: 0..65535) | Matching destination protocol port number or range |
| flow-label (integer: 0..1048575) | Matching IPv6 flow label |
| mac-protocol (802.2 | arp | homeplug-av | ip | ipv6 | ipx | lldp | loop-protect | mpls-multicast | mpls-unicast | packing-compr | packing-simple | pppoe | pppoe-discovery | rarp | service-vlan | vlan | or 0..65535 | or 0x0000-0xffff) | Matching particular MAC protocol specified by protocol name or number (skips VLAN tags if any) |
| ports (name) | Name of the interface on which the rule will apply on the received traffic, multiple ports are allowed |
| protocol (dccp | ddp | egp | encap | etherip | ggp | gre | hmp | icmp | icmpv6 | idpr-cmtp | igmp | ipencap | ipip | ipsec-ah | ipsec-esp | ipv6 | ipv6-frag | ipv6-nonxt | ipv6-opts | ipv6-route | iso-tp4 | l2tp | ospf | pim | pup | rdp | rspf | rsvp | sctp | st | tcp | udp | udp-lite | vmtp | vrrp | xns-idp | xtp | or 0..255) | Matching particular IP protocol specified by protocol name or number |
| src-address (IP address/Mask) | Matching source IP address and mask |
| src-address6 (IPv6 address/Mask) | Matching source IPv6 address and mask |
| src-mac-address (MAC address/Mask) | Matching source MAC address and mask |
| src-port (0..65535) | Matching source protocol port number or range |
| switch (switch group) | Matching switch group on which will the rule apply |
| traffic-class (0..255) | Matching IPv6 traffic class |
| vlan-id (0..4095) | Matching VLAN ID (the property only applies to theAtheros8316, Atheros8327, QCA8337, 88E6393X switch chips) |
| vlan-header (not-present | present) | Matching VLAN header, whether the VLAN header is present or not (the property only applies to the Atheros8316, Atheros8327, QCA8337, 88E6393X switch chips) |
| vlan-priority (0..7) | Matching VLAN priority (priority code point) |
...