source-ip (user-defined signature rule view)

Function

The source-ip command specifies the source IP address to be checked by a user-defined signature rule.

The undo source-ip command deletes the source IP address to be checked by a user-defined signature rule.

Format

source-ip { [ ipv4 ] start-ipv4-address [ end-ipv4-address | ipv4-mask-length ] | ipv6 start-ipv6-address [ end-ipv6-address | prefix-length ] | any }

undo source-ip

Parameters

Parameter	Description	Value
start-ipv4-address	Specifies the start IPv4 address.	The value is in dotted decimal notation.
end-ipv4-address	Specifies the end IPv4 address.	The value is in dotted decimal notation.
ipv4-mask-length	Specifies the mask length of the IPv4 address.	The value is an integer ranging from 1 to 32.
start-ipv6-address	Specifies the start IPv6 address.	The value is in hexadecimal notation.
end-ipv6-address	Specifies the end IPv6 address.	The value is in hexadecimal notation.
prefix-length	Specifies the prefix length of the IPv6 address.	The value is an integer ranging from 1 to 128.
any	Indicates any IP address.	-

Views

User-defined signature rule view

Default Level

2: Configuration level

Usage Guidelines

All source IP addresses are checked by the user-defined signature rule by default.

The user-defined signature rule can be used to check a single IP address or all address in an IP address range. To use a user-defined signature rule to check an IP address range, you can specify the start and end IP addresses or the mask-length or prefix length to define the IP address range.

Example

# Create user-defined signature rule hello in user-defined signature 1 and set the source IPv4 address to be checked to 10.1.1.1.

<sysname> system-view
[sysname] ips signature-id 1
[sysname-ips-signature-1] protocol TCP  
[sysname-ips-signature-1] rule name hello
[sysname-ips-signature-1-rule-hello] source-ip ipv4 10.1.1.1

# In user-defined signature with the ID of 1, specify user-defined signature rule hello and set the source IPv4 address range from 10.1.1.1 to 10.1.1.100 to be checked.

<sysname> system-view
[sysname] ips signature-id 1
[sysname-ips-signature-1] protocol TCP  
[sysname-ips-signature-1] rule name hello
[sysname-ips-signature-1-rule-hello] source-ip ipv4 10.1.1.1 10.1.1.100