General Policy Settings - IBM TS3100 Setup, Operator, And Service Manual

Table 5-14. General Policy settings (continued)
Name of setting
Protocol ID
Port Range
v From
v To
Address Range
v From
v To
Available Values
v All
v TCP
v UDP
v ICMPv6
v All
v Custom
v All
v Single
v Range
v Subnet
v Library Address
Comments
The Protocol ID defines for which IP
protocol type the policy is used.
Possible values are:
v Any
All protocol types are selected
v TCP/UDP
v ICMPv6
In case of ICMPv6 you can choose
the message type. This is mainly
for test and certification.
– All/Echo Request (Ping
Send)/Echo Reply (Ping
Receive)/NS/NA
Note: NS = Neighborhood
Solicitation, NA =
Neighborhood Advertisement
In case of TCP or UDP protocol the
selector can be restricted to a range
of protocol ports.
Example: Only standard HTTP traffic
should be secured by IPSec.
v Protocol ID: TCP
v Port Range: 80 - 80
The Address Range defines for which
device addresses (mainly peer
addresses) the policy is selected.
v All
Any peer address will trigger
v Single
Only the address which is defined
in the From: address field will
trigger.
v Range
The Addresses between From: and
To: will trigger.
v Subnet
All addresses in the subnet defined
by the From: field and the Prefix
length will be used.
v Library Address
In case the device has multiple
local addresses (stateless/statefull)
a address can be selected by this
field. Only packets which are
dedicated for this local address are
selected.
Chapter 5. Operations
5-59