ASA v7.2 "match header-flag" class-map subcommand

[j.gauvin]

Hi,

could anyone running this version tell me what the cmd ref

means by:

match [not] header-flag [eq] {f_well_known | f_value}

eq Specifies an exact match. If not configured, specifies a match-all bit mask match.

I am not yet running 7.2 but I would like to know the syntax

of the bitmask and value.

Thanks a million

Jimmy Gauvin

PS Command comes from:

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/cmd_ref/m_711.htm#wp1743405

[wong34539]

To configure a match condition for a DNS header flag, use the match header-flag command in class-map or policy-map configuration mode. To remove a configured header flag, use the no form of this command.

match [not] header-flag [eq] {f_well_known | f_value}

no match [not] header-flag [eq] {f_well_known | f_value}

http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f573.html#wp1768996