Planet IGSW-2840 User Manual page 312

The page includes the following fields:
Object
Action
Source/Destination
Address Type
Source/Destination IP
Address
Source/Destination
Subnet Mask
Service Type
Protocol
Source/Destination Port
Start
Source/Destination Port
End
Control Flag
Description
An ACL can contain any combination of permit or deny rules.
(Default: Permit rules)
Specifies the source or destination IP address. Use "Any" to include all possible
addresses, "Host" to specify a specific host address in the Address field, or "IP"
to specify a range of addresses with the Address and SubMask fields.
Options: Any, Host, IP;
Default: Any
Source or destination IP address.
Subnet mask for source or destination address.
(See the description for Subnet Mask.)
Packet priority settings based on the following criteria:
-Precedence – IP precedence level. (Range: 0-7)
-DSCP – DSCP priority level. (Range: 0-63)
Specifies the protocol type to match as TCP, UDP or Others, where others
indicates a specific protocol number (0-255).
Options: TCP, UDP, Others;
Default: TCP
Source/destination port number for the specified protocol type.
(Range: 0-65535)
Upper bound of the protocol port range.
(Range: 0-65535)
Decimal number (representing a bit string) that specifies flag bits in byte 14 of the
TCP header. (Range: 0-63)
You can specify both Precedence and ToS in the same rule. However, if DSCP is
used, then neither Precedence nor ToS can be specified.
The following control codes may be specified:
-1 (fin) – Finish
-2 (syn) – Synchronize
-4 (rst) – Reset
-8 (psh) – Push
-16 (ack) – Acknowledgement
-32 (urg) – Urgent pointer
To define more than one control code, set the equivalent binary bit to "1" to
indicate the required codes. For example, to set both SYN and ACK valid, set the
control flag to 18.
312
User's Manual of IGSW-2840