SMC Networks 6724AL2 Management Manual page 91

• Control Flag – Decimal number (representing a bit string) that
specifies flag bits in byte 14 of the TCP header. (Range: 0-63)
• Control Bitmask – Decimal number representing the code bits to
match.
The control bitmask is a decimal number (for an equivalent binary bit
mask) that is applied to the control code. Enter a decimal number,
where the equivalent binary bit "1" means to match a bit and "0"
means to ignore a bit. The following bits may be specified:
- 1 (fin) – Finish
- 2 (syn) – Synchronize
- 4 (rst) – Reset
- 8 (psh) – Push
- 16 (ack) – Acknowledgement
- 32 (urg) – Urgent pointer
For example, use the code value and mask below to catch packets with
the following flags set:
- SYN flag valid, use "control-flag 2 2"
- Both SYN and ACK valid, use "control-flag 18 18"
- SYN valid and ACK invalid, use "control-flag 2 18"
ACL Configuration – Configuring a MAC ACL
• Action – An ACL can contain all permit rules or all deny rules.
(Default: Permit rules)
• Source/Destination MAC – Source or destination MAC.
• Source/Destination MAC Address – Source or destination MAC
address.
• Source/Destination BitMask – Binary mask for source or
destination MAC address.
A C
CCESS ONTROL
L
ISTS
2-59