NETGEAR M7100 Series User Manual page 664

M6100, M5300, and M7100 Series Managed Switches
Equal. IP ACL rule matches only if the Layer 4 source port number is equal to the
•
specified port number or port key.
Less Than. IP ACL rule matches if the Layer 4 source port number is less than the
•
specified port number or port key.
Greater Than. IP ACL rule matches if the Layer 4 source port number is greater than
•
the specified port number or port key.
Not Equal. IP ACL rule matches only if the Layer 4 source port number is not equal to
•
the specified port number or port key.
When you select the Range option, IP ACL rule matches only if the Layer 4 port number is
29.
within the specified port range.
The Start Port and End Port parameters identify the first and last ports that are part of the
port range. They values can range from 0 to 65535.
The possibility of entering your own port number is available only when Other is selected
in the list of port keys. The destination L4 starting port, destination L4 ending port, and all
ports in between are a part of the Layer 4 port range. If these fields are left empty, it
means any.
IGMP Type - When the IGMP type is specified, the IP ACL rule matches the specified IGMP
30.
message type.
Possible values are in the range 0 to 255. If this field is left empty, it means any.
ICMP Type and ICMP Code - The ICMP Type and ICMP Code fields are enabled only if the
31.
protocol is ICMP. Use the ICMP Type and ICMP Code fields to specify a match condition for
ICMP packets:
When the ICMP Type option is selected, IP ACL rule matches the specified ICMP
•
message type. Possible type numbers are in the range from 0 to 255.
When the ICMP Code option is specified, IP ACL rule matches the specified ICMP
•
message code. Possible values for Code could be in the range from 0 to 255.
If these fields are left empty, it means any.
•
When the Message option is selected, choose the type of the ICMP message to
•
match with the selected IP ACL rule. Specifying Message implies that both ICMP type
and ICMP code are specified. The ICMP message is decoded into the corresponding
ICMP type and ICMP code within that ICMP type. IPv4 ICMP message types are:
echo, echo-reply, host-redirect, mobile-redirect, net-redirect, net-unreachable,
redirect, packet-too-big, port-unreachable, source-quench, router-solicitation,
router-advertisement, time-exceeded, ttl-exceeded, and unreachable.
Service Type - Select a service type match condition for the extended IP ACL rule.
32.
The possible values are IP DSCP, IP precedence, and IP TOS, which are alternative
ways of specifying a match criterion for the same service type field in the IP header;
however each uses a different user notation. After a selection is made, the appropriate
value can be specified.
IP DSCP. Specify the IP DiffServ Code Point (DSCP) field. The DSCP is defined as
•
the high-order 6 bits of the service type octet in the IP header. This is an optional
configuration. Enter an integer from 0 to 63. To select the IP DSC, select one of the
Manage Device Security
664