destination-ip (user-defined signature rule view)

Function

The destination-ip command specifies the destination IP address to be checked by a user-defined signature rule.

The undo destination-ip command deletes the destination IP address to be checked by a user-defined signature rule.

Format

destination-ip { [ ipv4 ] start-ipv4-address [ end-ipv4-address | ipv4-mask-length ] | ipv6 start-ipv6-address [ end-ipv6-address | prefix-length ] | any }

undo destination-ip

Parameters

Parameter	Description	Value
start-ipv4-address	Specifies the start IPv4 address.	The value is in dotted decimal notation.
end-ipv4-address	Specifies the end IPv4 address.	The value is in dotted decimal notation.
ipv4-mask-length	Specifies the mask length of the IPv4 address.	The value is an integer ranging from 1 to 32.
start-ipv6-address	Specifies the start IPv6 address.	The value is in hexadecimal notation.
end-ipv6-address	Specifies the end IPv6 address.	The value is in hexadecimal notation.
prefix-length	Specifies the prefix length of the IPv6 address.	The value is an integer ranging from 1 to 128.
any	Indicates any IP address.	-

Views

User-defined signature rule view

Default Level

2: Configuration level

Usage Guidelines

All destination IP addresses are checked by the user-defined signature rule by default.

The user-defined signature rule can be used to check a single IP address or all address in an IP address range. To use a user-defined signature rule to check an IP address range, you can specify the start and end IP addresses or the mask-length or prefix length to define the IP address range.

Example

# Create user-defined signature rule hello in user-defined signature 1 and set the destination IPv4 address to be checked to 10.2.2.1.

<sysname> system-view
[sysname] ips signature-id 1
[sysname-ips-signature-1] protocol TCP  
[sysname-ips-signature-1] rule name hello
[sysname-ips-signature-1-rule-hello] destination-ip 10.2.2.1

# In user-defined signature with the ID of 1, specify user-defined signature rule hello and set the destination IPv4 address range from 10.2.2.1 to 10.2.2.100 to be checked.

<sysname> system-view
[sysname] ips signature-id 1
[sysname-ips-signature-1] protocol TCP  
[sysname-ips-signature-1] rule name hello
[sysname-ips-signature-1-rule-hello] destination-ip 10.2.2.1 10.2.2.100