Where is this option in the CLI? I’ve issued the export command in /interface bridge filter, but I don’t see this option anywhere. I’m using ROS 3.11.
[admin@rb450] > /interface bridge filter add
Creates new item with specified property values.
802.3-sap --
802.3-type --
action -- Action to undertake if the packet matches the rule
arp-dst-address -- ARP destination address
arp-dst-mac-address -- ARP destination MAC address
arp-hardware-type -- The hardware type
arp-opcode -- The ARP opcode
arp-packet-type -- ARP packet type
arp-src-address -- ARP source address
arp-src-mac-address -- ARP source MAC address
chain -- Chain name
comment -- Set comment for items
copy-from -- Item number
disabled -- Defines whether MAC Telnet Server is disabled or not
dst-address -- Destination address
dst-mac-address -- Destination MAC address
dst-port -- Destination port
in-bridge -- Bridge interface the packet is coming in
in-interface -- Interface name packets are coming into the bridge
ip-protocol -- IP protocol name
jump-target -- if action=jump, then jump destination should be set here
limit -- Restricts packet match rate to a given limit
log-prefix -- Defines the prefix to be printed before the logging information
mac-protocol -- Protocol name or number
new-packet-mark --
new-priority --
out-bridge -- Bridge interface the packet is going out
out-interface -- Interface name packets are leaving the bridge
packet-mark --
packet-type -- Packet type
passthrough --
place-before -- Item number
src-address -- Source address
src-mac-address -- Source MAC address
src-port -- Source port
stp-flags -- BPDU flags
stp-forward-delay -- Forward delay timer
stp-hello-time -- STP hello packets time
stp-max-age -- STP maximum age
stp-msg-age -- STP message age
stp-port -- STP port identifier
stp-root-address -- Root bridge MAC address
stp-root-cost -- Root bridge cost
stp-root-priority -- Root bridge priority
stp-sender-address -- STP message sender MAC address
stp-sender-priority -- Sender priority
stp-type -- Bridge Protocol Data Unit (BPDU) type
vlan-encap -- The encapsulated Ethernet type
vlan-id -- VLAN identifier field
vlan-priority -- The user priority field
/ip firewall filter has the time option in the CLI
[admin@rb450] > /ip firewall filter add
Creates new item with specified property values.
action -- Action to undertake if the packet matches the rule
address-list -- Address list in which marked address put
address-list-timeout -- Time interval after which address remove from address list
chain -- The name of the chain through which packets are traversing
comment -- Set comment for items
connection-bytes -- Match packets with given bytes or byte range
connection-limit -- Restrict connection limit per address or address block
connection-mark -- Matches packets marked via mangle facility with particular connection mark
connection-state -- Interprets the connection tracking analysis data for a particular packet
connection-type -- Match packets with given connection type
content -- The text packets should contain in order to match the rule
copy-from -- Item number
disabled -- Defines whether MAC Telnet Server is disabled or not
dscp --
dst-address -- Destination address with mask
dst-address-list -- Destination address list name in which packet place
dst-address-type -- Destination address type
dst-limit -- Packet limitation per time with burst to dst-address, dst-port or src-address
dst-port -- Destination port number or range
fragment --
hotspot -- Matches packets received from clients against various Hot-Spot
icmp-options -- Matches ICMP Type:Code fields
in-bridge-port --
in-interface -- Interface the packet has entered the router through
ingress-priority --
ipv4-options -- Match ipv4 header options
jump-target -- Name of the target chain, if the action=jump is used
layer7-protocol --
limit -- Setup burst, how many times to use it in during time interval measured in seconds
log-prefix -- Creates all logs with specific prefix
nth -- Match nth packets received by the rule
out-bridge-port -- Matches the bridge port physical output device added to a bridge device
out-interface -- Interface the packet has leaved the router through
p2p -- P2P program to match
packet-mark -- Matches packets marked via mangle facility with particular packet mark
packet-size -- Packet size or range in bytes
place-before -- Item number
port --
protocol -- Protocol name or number
psd -- Detect TCP un UDP scans
random -- Match packets randomly with given propability
reject-with -- Alters the reply packet of reject action
routing-mark -- Matches packets marked by mangle facility with particular routing mark
src-address -- Source address with mask
src-address-list -- Matches source address of a packet against user-defined address list
src-address-type -- Source IP address type
src-mac-address -- Source MAC address
src-port -- Source-port number
tcp-flags -- TCP flags to match
tcp-mss -- TCP Maximum Segment Size value
time -- Packet arrival time and date or locally generated packets departure time and date