ZyXEL Communications MGS3600-24F User Manual page 152

F M
RONT ATTER
IP TTL

Use this drop-down box to configure which IP time to live matches this ACE. Choose
choose Zero to match a TTL of 0 or
IP Fragment

Use this drop-down box to configure the ACE to check if the IP datagram is fragmented (IP more fragments flag is set or IP fragment offset
field is more than 0). Choose
fragmented or choose
IP Option

Use this drop-down box to configure the ACE to check if the IP datagram has options. Choose
check. Choose Yes to register a match in the ACE if the datagram has options or choose
doesn't have options.
SIP Filter and DIP Filter

Use these drop-down boxes to configure which source IP address and destination IP address field values match this ACE. Choose
configure this ACE to ignore the source/destination IP address field. Choose
field to match a specific source or destination IP address. Choose
Mask or DIP Mask fields to match all source/destination IP addresses within a network.
ICMP Parameters
ICMP Type Filter and

Use these drop-down boxes to configure which ICMP type and ICMP code field values match this ACE. Choose
to ignore the type/code field. Choose
or code.
UDP Parameters
Source Port Filter and

Use these drop-down boxes to configure which UDP source port and UDP destination port field values match this ACE. Choose
figure this ACE to ignore the source/destination port field. Choose
to match a specific source or destination port. Choose
match a range of source or destination ports.
MGS3600-24F/XGS3600-26F/XGS3600-28F
Non-zero to match a TTL of greater than 0.
Any to configure this ACE to ignore the check. Choose
No to register a match in the ACE if the datagram is unfragmented.
ICMP Code Filter
Specific and then complete the
Dest. Port Filter
Host and then complete the
Network and then complete the
ICMP Type Value
Specific and then complete the
Range and then complete the
7-19
Any to configure this ACE to ignore the IP TTL,
Yes to register a match in the ACE if the datagram is
Any to configure this ACE to ignore the
No to register a match in the ACE if the datagram
SIP Address
SIP Address or
Any
or ICMP Code Value field to match a specific type
Source Port No.
Source Port Range or Dest. Port Range
Any to
or DIP Address
DIP Address and SIP
to configure this ACE
Any to con-
or Dest. Port No. field
field to
U ' G
SER S UIDE