Planet IGS-5225 Series User Manual page 368

• Next Header Value
SIP Filter
•
• SIP Address
• SIP BitMask
• Hop Limit
ICMP Parameters

Object
ICMP Type Filter
•
ICMP Type Value
•
defining ICMP parameters will appear. These fields are explained later in
this help file.
UDP: Select UDP to filter IPv6 UDP protocol frames. Extra fields for
■
defining UDP parameters will appear. These fields are explained later in
this help file.
TCP: Select TCP to filter IPv6 TCP protocol frames. Extra fields for defining
■
TCP parameters will appear. These fields are explained later in this help
file.
When "Specific" is selected for the IPv6 next header value, you can enter a
specific value. The allowed range is 0 to 255. A frame that hits this ACE matches
this IPv6 protocol value.
Specify the source IPv6 filter for this ACE.
Any: No source IPv6 filter is specified. (Source IPv6 filter is "don't-care".)
■
Specific: Source IPv6 filter is set to Network. Specify the source IPv6
■
address and source IPv6 mask in the SIP Address fields that appear.
When "Specific" is selected for the source IPv6 filter, you can enter a specific
SIPv6 address. The field only supported last 32 bits for IPv6 address.
When "Specific" is selected for the source IPv6 filter, you can enter a specific
SIPv6 mask. The field only supported last 32 bits for IPv6 address. Notice the
usage of bitmask, if the binary bit value is "0", it means this bit is "don't-care".
The real matched pattern is [sipv6_address & sipv6_bitmask] (last 32 bits). For
example, if the SIPv6 address is 2001::3 and the SIPv6 bitmask is
0xFFFFFFFE(bit 0 is "don't-care" bit), then SIPv6 address 2001::2 and 2001::3
are applied to this rule.
Specify the hop limit settings for this ACE.
zero: IPv6 frames with a hop limit field greater than zero must not be able
■
to match this entry.
non-zero: IPv6 frames with a hop limit field greater than zero must be
■
able to match this entry.
Any: Any value is allowed ("don't-care").
■
Description
Specify the ICMP filter for this ACE.
Any: No ICMP filter is specified (ICMP filter status is "don't-care").
■
Specific: If you want to filter a specific ICMP filter with this ACE, you can
■
enter a specific ICMP value. A field for entering an ICMP value appears.
When "Specific" is selected for the ICMP filter, you can enter a specific ICMP
368
User's Manual of IGS-5225 series