Table of Contents
Advertisement
Security | Network | ACL | Access Control List
Item
Specify whether frames can hit the action according to their ARP/RARP protocol address
space (PRO) settings.
•
0: ARP/RARP frames where the PRO is not equal to IP (0x800).
Ethernet
•
1: ARP/RARP frames where the PRO is equal to IP (0x800).
•
Any: Any value is allowed (don't-care).
IP Parameters
Specify the IP protocol filter for this ACE.
•
Any: No IP protocol filter is specified (don't-care).
•
Specific: If you want to filter a specific IP protocol filter with this ACE, choose this
value. A field for entering an IP protocol filter appears.
IP Protocol
•
ICMP: Select ICMP to filter IPv4 ICMP protocol frames. Extra fields for defining ICMP
Filter
parameters will appear. These fields are explained later in this help file.
•
UDP: Select UDP to filter IPv4 UDP protocol frames. Extra fields for defining UDP
parameters will appear. These fields are explained later in this help file.
•
TCP: Select TCP to filter IPv4 TCP protocol frames. Extra fields for defining TCP
parameters will appear. These fields are explained later in this help file.
IP Protocol
When Specific is selected for the IP protocol value, you can enter a specific value. The
Value
allowed range is 0 to 255. A frame that hits this ACE matches this IP protocol value.
Specify the Time-to-Live settings for this ACE.
•
zero: IPv4 frames with a Time-to-Live field greater than zero must not be able to match
this entry.
IP TTL
•
non-zero: IPv4 frames with a Time-to-Live field greater than zero must be able to match
this entry.
•
Any: Any value is allowed (don't-care).
Specify the fragment offset settings for this ACE. This involves the settings for the More
Fragments (MF) bit and the Fragment Offset (FRAG OFFSET) field for an IPv4 frame.
•
No: IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than
zero must not be able to match this entry.
IP Fragment
•
Yes: IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than
zero must be able to match this entry.
•
Any: Any value is allowed (don't-care).
Specify the options flag setting for this ACE.
•
No: IPv4 frames where the options flag is set must not be able to match this entry.
IP Option
•
Yes: IPv4 frames where the options flag is set must be able to match this entry.
•
Any: Any value is allowed (don't-care).
Specify the source IP filter for this ACE.
•
Any: No Source IP Filter is specified. (Source IP Filter is don't-care.)
•
Host: Source IP Filter is set to Host. Specify the source IP address in the SIP Address field
SIP Filter
that appears.
•
Network: Source IP Filter is set to Network. Specify the source IP address and source IP
mask in the SIP Address and SIP Mask fields that appear.
96 - Configuration Pages
Configuration | Security | Network | ACL | Access Control List | ACE
Configuration (Continued)
RocketLinx MP1204-XT User Guide: 2000644 Rev. A
Advertisement
Table of Contents
