Planet Networking & Communication WSGW-24020 User Manual page 58

The Page contains the following fields:
ACL Name
New ACL Name
Delete ACL
Action
Protocol
Select from List
TCP Flags
Displays the user-defined IP based ACLs.
Defines a new user-defined IP based ACL.
By which deletes the selected ACL.
Indicates the action assigned to the packet matching the ACL. Packets are
forwarded or dropped. In addition, the port can be shutdown, a trap can be sent to
the network administrator, or a packet assigned rate limiting restrictions for
forwarding. The options are as follows:
• Permit, by which forwards packets which meet the ACL criteria.
• Deny, which drops packets which meet the ACL criteria.
• Shutdown, where drops packet that meets the ACL criteria, and disables the
port to which the packet was addressed. Ports are reactivated from the Port
Management screen.
By which creates an ACE (Access Control Event) based on a specific protocol
Where selects from a protocols list on which ACE can be based. The possible field
values are:
• Any, matches the protocol to any protocol.
• EIGRP, which indicates that the Enhanced Interior Gateway Routing Protocol
(EIGRP) is used to classify network flows.
• ICMP, which indicates that the Internet Control Message Protocol (ICMP) is
used to classify network flows.
• IGMP, which indicates that the Internet Group Management Protocol (IGMP) is
used to classify network flows.
• TCP, which indicates that the Transmission Control Protocol is used to classify
network flows.
• OSPF, by which matches the packet to the Open Shortest Path First (OSPF)
protocol.
• UDP, which indicates that the User Datagram Protocol is used to classify
network flows.
• Protocol ID to Match, adds user-defined protocols to which packets are
matched to the ACE. Each protocol has a specific protocol number which is
unique. The possible field range is 0-255.
This filters packets by TCP flag. Filtered packets are either forwarded or dropped.
Filtering packets by TCP flags increases packet control, and network security. The
values that can be assigned are:
• Set, which enables filtering packets by selected flags.
• Unset, disables filtering packets by selected flags.
• Don't care, which indicates that selected packets do not influence the packet
-58-
User's Manual of WGSW-24020/WGSW-48040