Network Integration Guide › Specifying NBA Policy in XML › IP Address and Port Filters › Example Address and Port Filters

Example Address and Port Filters

These examples show how to specify IP addresses and port numbers, including masked addresses.

Wildcard Example

<element value="*"/>

The NBA applies a filter to packets sent to or from any IP addresses and any ports.

Note: This is the only supported usage for wildcards when specifying address and port filters. For example, you cannot specify:

<element value="*:10"/>

Address Only Examples

<element value="10.0.1.53"/>

The NBA applies a filter to packets sent to or from IP address 10.0.1.53.

<element value="10.0.1.53-10.0.1.80"/>

The NBA applies a filter to packets sent to or from IP addresses 10.0.1.53 to 10.0.1.80.

<element value="fe80::-fe81::"/>

The NBA applies a filter to packets sent to or from IP addresses fe80:0:0:0:0:0:0:0 to fe81:0:0:0:0:0:0:0.

Address and Port Examples

<element value="192.160.0.5:10"/>

The NBA applies a filter to packets sent to or from IP address 192.160.0.5, but only if the packets are sent to or from port 10.

<element value="192.160.0.5:128-1023"/>

The NBA applies a filter to packets sent to or from IP address 192.160.0.5, but only if the packets are sent to or from ports 128 to 1023.

<element value="10.0.0.5-10.0.3.250:100"/>

The NBA applies a filter to packets sent to or from IP addresses 10.0.0.5 to 10.0.3.250, but only if the packets are sent to or from port 100.

<element value="[fe80::]-[fe81::]:80"/>

The NBA applies a filter to packets sent to or from IP addresses fe80:0:0:0:0:0:0:0 to fe81:0:0:0:0:0:0:0, but only if the packets are sent to or from port 80.

Note: Enclose the IPv6 addresses in brackets when you specify a port number or range.

Masked AddressExamples

<element value="123"/>

The NBA uses an implied mask to apply a filter to packets sent to or from IP addresses 123.0.0.0 to 123.255.255.255. In binary form, this gives the following values. Masked bits are shown in italics:

01111011.00000000.00000000.00000000

to

01111011.11111111.11111111.11111111

<element value="10/7"/>

The NBA applies a filter to packets sent to or from IP addresses 10.0.0.0 to 11.255.255.255. In binary form, this gives the following values. Masked bits are shown in italics:

00001010.00000000.00000000.00000000

to

00001011.11111111.11111111.11111111

<element value="10.64/12:128-1023"/>

The NBA applies a filter to packets sent to or from IP addresses 10.64.0.0 to 10.79.255.255. But note the filter is only applied to packets sent from or to ports 128 to 1023.

In binary form, this gives the following values. Masked bits are shown in italics:

00001010.01000000.00000000.00000000

to

00001010.01001111.11111111.11111111