Dell PowerConnect J-EX4200-24T Software Manual page 2801

Table 335: Supported Match Conditions Applicable to IPv4 Traffic for Firewall Filters on J-EX
Series Switches
Match Condition Description
IP destination address field, which is the
destination-address
address of the final destination node.
ip-address
For IPv6, specifies the 128-bit address that
is the final destination node address for the
packet. The filter description syntax
supports the text representations for IPv6
addresses as described in RFC 2373, IP
Version6 Addressing Architecture.
Destination media access control (MAC)
destination-mac-address
address of the packet.
mac-address
or more actions that the switch takes if a packet matches the match conditions for the
specific term. Allowed actions are accept a packet or discard a packet. In addition, you
can specify action modifiers to count, mirror, rate limit, and classify packets.
For each firewall filter, you define the terms that specify the filtering criteria (match
conditions) to apply to packets and the action for the switch to take if a match occurs.
The string that defines a match condition is called a match statement. The following
tables list various match conditions and their support platforms, binding points, and
actions.
Table 335 on page 2729 describes the match conditions you can specify when configuring
a firewall filter for IPv4 traffic.
Table 336 on page 2738 describes the match conditions you can specify when configuring
a firewall filter for IPv6 traffic.
Table 337 on page 2744 shows the actions that you can specify in a term.
Table 338 on page 2744 shows the action modifiers that you can specify in a term.
Chapter 100: Firewall Filters—Overview
Supported Platforms and Bind Points
Ingress
J-EX4200—ports,
VLANs, and Layer 3
interfaces
J-EX8200—ports,
VLANs, and Layer 3
interfaces
J-EX4200—ports and
VLANs
J-EX8200—ports and
VLANs
Egress
J-EX4200—ports,
VLANs, and Layer 3
interfaces
J-EX8200—ports,
VLANs, and Layer 3
interfaces
J-EX4200—ports and
VLANs
J-EX8200—ports and
VLANs
2729