Table of Contents
Advertisement
DIP Address
DIP Mask
IPv6 Parameters
Next Header Filter
Next Header Value
SIP Filter
SIP address
SIP BitMask
Hop Limit
ICMP Parameters
ICMP Type Filter
ICMP Type Value
ICMP Code Filter
ICMP Code Value
TCP/UDP Parameters
TCP/UDP Source Filter
Host: Destination IP filter is set to Host. Specify the destination IP address in the DIP
Address field that appears.
Network: Destination IP filter is set to Network. Specify the destination IP address
and destination IP mask in the DIP Address and DIP Mask fields that appear.
When "Host" or "Network" is selected for the destination IP filter, you can enter a
specific DIP address in
dotted decimal
When "Network" is selected for the destination IP filter, you can enter a specific DIP
mask in
dotted decimal
notation.
Specify the IPv6 next header filter for this ACE.
Any: No IPv6 next header filter is specified ("don't-care").
Specific: If you want to filter a specific IPv6 next header filter with this ACE, choose
this value. A field for entering an IPv6 next header filter appears.
ICMP: Select ICMP to filter IPv6 ICMP protocol frames. Extra fields for defining ICMP
parameters will appear. These fields are explained later in this help file.
UDP: Select UDP to filter IPv6 UDP protocol frames. Extra fields for defining UDP
parameters will appear. These fields are explained later in this help file.
TCP: Select TCP to filter IPv6 TCP protocol frames. Extra fields for defining TCP
parameters will appear. These fields are explained later in this help file.
When "Specific" is selected for the IPv6 next header value, you can enter a specific
value. The allowed range is 0 to 255. A frame that hits this ACE matches this IPv6
protocol value.
Specify the source IPv6 filter for this ACE.
Any: No source IPv6 filter is specified. (Source IPv6 filter is "don't-care".)
Specific: Source IPv6 filter is set to Network. Specify the source IPv6 address and
source IPv6 mask in the SIP Address fields that appear.
When "Specific" is selected for the source IPv6 filter, you can enter a specific SIPv6
address. The field only supported last 32 bits for IPv6 address.
When "Specific" is selected for the source IPv6 filter, you can enter a specific SIPv6
mask. The field only supported last 32 bits for IPv6 address. Notice the usage of
bitmask, if the binary bit value is "0", it means this bit is "don't-care". The real matched
pattern is [sipv6_address & sipv6_bitmask] (last 32 bits). For example, if the SIPv6
address is 2001::3 and the SIPv6 bitmask is 0xFFFFFFFE(bit 0 is "don't-care" bit),
then SIPv6 address 2001::2 and 2001::3 are applied to this rule.
Specify the hop limit settings for this ACE.
zero: IPv6 frames with a hop limit field greater than zero must not be able to match
this entry.
non-zero: IPv6 frames with a hop limit field greater than zero must be able to match
this entry.
Any: Any value is allowed ("don't-care").
Specify the ICMP filter for this ACE.
Any: No ICMP filter is specified (ICMP filter status is "don't-care").
Specific: If you want to filter a specific ICMP filter with this ACE, you can enter a
specific ICMP value. A field for entering an ICMP value appears.
When "Specific" is selected for the ICMP filter, you can enter a specific ICMP value.
The allowed range is 0 to 255. A frame that hits this ACE matches this ICMP value.
Specify the ICMP code filter for this ACE.
Any: No ICMP code filter is specified (ICMP code filter status is "don't-care").
Specific: If you want to filter a specific ICMP code filter with this ACE, you can enter
a specific ICMP code value. A field for entering an ICMP code value appears.
When "Specific" is selected for the ICMP code filter, you can enter a specific ICMP
code value. The allowed range is 0 to 255. A frame that hits this ACE matches this
ICMP code value.
Specify the TCP/UDP source filter for this ACE.
Any: No TCP/UDP source filter is specified (TCP/UDP source filter status is
"don't-care").
notation.
87
Advertisement
Table of Contents
