D-Link DWS-4026 User Manual page 350

D-Link Unified Access System
Field
Service Type
Modifying an IP-based Rule
Rules can be modified only when the ACL to which they belong is not bound to an interface.
1 Open the IP ACL Rule Configuration page.
2 Select the desired ACL from the IP ACL menu.
3 Select the desired rule from the Rule ID menu.
4 Modify the remaining fields as needed.
5 Click Submit.
The IP-based rule is modified, and the device is updated.
Adding a New Rule to an IP-based ACL
1 Open the IP ACL Rule Configuration page.
2 Select the desired ACL from the IP ACL menu.
3 Specify Create Rule for Rule ID and enter a new ID number.
4 Define the remaining fields as needed.
5 Click Submit.
The new rule is assigned to the specified IP-based ACL.
Page 350 Configuring Access Control Lists
Table 219: IP ACL Rule Configuration Fields (Cont.)
Description
Select one of the following three Match conditions for the extended IP ACL rule. These
are alternative ways of specifying a match condition for the same Service Type field in
the IP header, however each uses a different user notation. After a selection is made,
the appropriate value can be specified:
• IP DSCP: This field matches the packet DSCP value to the rule. Specify the IP
DiffServ Code Point (DSCP) field. The DSCP is defined as the high-order six bits of
the Service Type octet in the IP header. This is an optional configuration. Enter an
integer from 0 to 63. The IP DSCP is selected by selecting one of the DSCP keyword
values from a menu. If a value is to be selected by specifying its numeric value, then
select the 'Other' option in the menu and a text box will appear where you can enter
the numeric value of the DSCP.
• IP Precedence: The IP Precedence field in a packet is defined as the high-order three
bits of the Service Type octet in the IP header. This is an optional configuration. This
field matches the packet IP Precedence value to the rule when checked. Enter the IP
Precedence value, an integer from 0 to 7, to match. Either the DSCP value or the IP
Precedence value is used to match packets to ACLs.
• IP TOS Bits: The IP TOS field in a packet is defined as all eight bits of the Service
Type octet in the IP header. Matches on the Type of Service bits in the IP header
when checked. For example, to check for an IP TOS value having bits 7 and 5 set and
bit 1 clear, where bit 7 is most significant, use a TOS Bits value of 0xA0 and a TOS
Mask of 0xFF. This is an optional configuration.
- TOS Bits: This value is a hexadecimal number from 00 to FF. Requires the bits in
a packet's TOS field to match the two-digit hexadecimal number entered here.
- TOS Mask: This value is a hexadecimal number from 00 to FF. Specifies the bit
positions that are used for comparison against the IP TOS field in a packet.
Software User Manual
Document 34CSFP6XXUWS-SWUM100-D7
12/10/09