Network Critical SmartNA-X User Manual page 54

54 | Restricting Traffic with Filters | SmartNA-X 1G/10G Modular
Header type
Table 4: Layer 4 headers
Header type
DSCP
Layer 4 port filtering
FIN, SYN, RST, PSH, ACK, URG, ECE, CWR
ICMPtype
Filtering options
•
•
•
•
•
Ranges and wildcards may be used in any segment(s).
Filtering options
Filters DSCP number. Separate multiple DSCP numbers
with commas. The following formats are recognized:
•
•
•
•
Filters by TCP/UDP port number when protocol number 6
(TCP) or 17 (UDP) is specified in Layer 3.
You may enter either a single specification to find packets
where either the source or the destination port matches, or
separate specifications for source and/or destination port.
Common TCP ports include:
•
•
•
•
•
•
•
Filters on the specified flag. For each flag the following
values may be set:
•
•
Filter by ICMP type when filtering by ICMP packet
(protocol number 1). The following formats are recognised:
•
•
™ ©
SmartNA-X 1G/10G User Guide 1.4 2015 Network Critical Solutions Limited
2000:abcd:0:0:0:0:77:88—A single address
2000:abcd::77:88—A single address (eliding a single
run of zero segments) 2000:abcd::77:88-99—A range
address (inclusive)
2000::*—A wildcard (here: 2000::0-ffff )
::ffff:0:0/96—Prefix (any address starting
0:0:0:0:0:ffff )
2000::1, 2000::3—Multiple addresses may each use
either ranges and wildcards or prefix notation.
10—a single code point
10–14—An inclusive range
0/1—a value/mask pair
10, 12, 14—multiple code points. Multiple code points
may each use a range or mask.
80, 8080—HTTP
443—HTTPS
25—SMTP
20-21—FTP
989, 990—FTPS
22—SSH
23—Telnet
0—Flag not set
1—Flag set
10—A single type
10–14—An inclusive range