*
*
,*(*-"'"($."/+(%0'%1& 2$
Ingress!Po r t:!
R24,:.03B*0; 3 *,2 - =3 BB *H 5 =0*5 M*0 ; 3*( G 6 C*" 5 B B,/ A3 *L . AI 3B *. =3 )* *
Any:*J;3*(G6*9,AA*K.0:;*.2N*,2-=3BB*H5=0C* *
Policy:*J;3*(G6*9,AA*K .0:;*,2-=3BB*H5=0B*9,0;*.*BH3:,M,:*H5A,:NC* *
Port:*J;3*(G6*9,AA*K.0:;*.*BH3:,M,:*,2-=3BB*H5=0C* *
Policy!/!Bitmask:!
R24,:.03B*0; 3 *H 5 A,: N*2 I K/3=*.24*/,0K.BE*5M*0;3*(G 6C*
Frame!Type!:*
R24,:.03B*0; 3 *M=. K3*0NH3*5M*0;3*( G 6 C*" 5 B B,/ A3 *L . AI 3B *. =3 )* *
Any)*J;3*(G6*9 ,AA*K.0:;*.2N*M=.K3*0NH3C* *
EType)*J;3*(G 6 *9,AA*K.0:;*60; 3 =2 3 0* JN H 3 *M =. K 3 B C*U503*0;.0*.2 *6 0; 3 =2 3 0 *J NH3*/.B34*(G6*9,AA*250*/3*
K.0:;34*/N*R"*.24*(@"*M=.K3BC* *
ARP)*J;3*(G6*9,AA*K.0:;*(@" g @ ( @ "*M =. K 3 B C* *
IPv4)*J;3*( G 6 *9,AA*K.0:;*.AA*R"La *M= .K3BC* *
IPv4/ICM P )*J ; 3 *( G 6 *9,AA*K.0:;*R"La*M=. K3B*9,0;*RG1 " *H =5 0 5 :5 AC* *
IPv4/UD P )*J ; 3 *( G 6*9,AA*K.0:;*R"La *M=. K3B*9,0;*]\" *H =5 05:5AC* *
IPv4/TCP )*J ; 3 *( G 6 *9 ,AA*K.0:;*R"La*M=.K3B*9,0;*JG"*H=505:5AC* *
IPv4/Oth e r)* J;3* (G6* 9,AA* K.0:; * R"L a* M=. K3BQ* 9;,:;* .=3* 25 0* RG 1"g]\"gJG" C* IP v 6)* J; 3 * ( G 6* 9 ,AA*
K.0:;*.AA*R"L>*B0.24.=4*M=.K3BC* *
Action:!
R24,:.03B*0; 3 *M5 =9.=4,2-*.:0,52 *5 M*0; 3 *( G 6 C* *
Permit)*V=.K3B*K.0:;,2-*0;3*(G6*K.N*/3*M5=9.=434*.24*A3.=234C* *
Deny)*V=.K3B*K. 0 :; ,2 - *0;3*(G6*.=3*4=5 H H 3 4 C* *
Filter)*V=.K3B*K. 0: ; ,2 - *0; 3 *( G 6 *. =3 *M,A03 =3 4 C* * *
Rate!Limiter:!
R24,:.03B* 0;3* =.03* A,K,03=* 2IK/ 3 =* 5M* 0;3* (G6C* J;3* .AA5934* =.2-3 * ,B* &* 05* &>C* ^;32 * \,B./ A3 4 * ,B*
4,BHA.N34Q*0;3*=.03*A,K,03=*5H3=.0,52*,B*4,B./A34C* *