ZyXEL Communications XGS3600 Series Manual page 67

ICMP: Select ICMP to filter IPv4 ICMP protocol frames. Extra fields for defining
ICMP parameters will appear. These fields are explained later in this help file.
UDP: Select UDP to filter IPv4 UDP protocol frames. Extra fields for defining
UDP parameters will appear. These fields are explained later in this help file.
TCP: Select TCP to filter IPv4 TCP protocol frames. Extra fields for defining TCP
parameters will appear. These fields are explained later in this help file.
IP Protocol Value

When "Specific" is selected for the IP protocol value, you can enter a specific
value. The allowed range is 0 to 255. A frame that hits this ACE matches this IP
protocol value.
IP TTL

Specify the Time-to-Live settings for this ACE.
zero: IPv4 frames with a Time-to-Live field greater than zero must not be able
to match this entry.
non-zero: IPv4 frames with a Time-to-Live field greater than zero must be
able to match this entry.
Any: Any value is allowed ("don't-care").
IP Fragment

Specify the fragment offset settings for this ACE. This involves the settings for
the More Fragments (MF) bit and the Fragment Offset (FRAG OFFSET) field for
an IPv4 frame.
No: IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater
than zero must not be able to match this entry.
Yes: IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater
than zero must be able to match this entry.
Any: Any value is allowed ("don't-care").
IP Option

Specify the options flag setting for this ACE.
No: IPv4 frames where the options flag is set must not be able to match this
entry.
Yes: IPv4 frames where the options flag is set must be able to match this entry.
Any: Any value is allowed ("don't-care").
SIP Filter

Specify the source IP filter for this ACE.
Any: No source IP filter is specified. (Source IP filter is "don't-care".)
Host: Source IP filter is set to Host. Specify the source IP address in the SIP
Address field that appears.
Network: Source IP filter is set to Network. Specify the source IP address and
source IP mask in the SIP Address and SIP Mask fields that appear.
SIP Address

When "Host" or "Network" is selected for the source IP filter, you can enter a
specific SIP address in dotted decimal notation.
SIP Mask

When "Network" is selected for the source IP filter, you can enter a specific SIP
mask in dotted decimal notation.
DIP Filter

XGS3600 Series User's Guide
60