INS_CNGE3FE8MS[POE][HO] Rev. 11.7.17 PAGE 73
INSTRUCTION MANUAL CNGE3FE8MS[POE][HO]
TECH SUPPORT: 1.888.678.9427
Object Description
SIP Address When “Host” or “Network” is selected for the source IP filter, you can enter a specific SIP address in
dotted decimal notation.
SIP Mask When “Network” is selected for the source IP filter, you can enter a specific SIP mask in dotted
decimal notation.
DIP Filter Specify the destination IP filter for this ACE.
Any: No destination IP filter is specified. (Destination IP filter is “don’t-care”.)
Host: Destination IP filter is set to Host. Specify the destination IP address in the DIP Address field
that appears.
Network: Destination IP filter is set to Network. Specify the destination IP address and destination IP
mask in the DIP Address and DIP Mask fields that appear.
DIP Address When “Host” or “Network” is selected for the destination IP filter, you can enter a specific DIP address
in dotted decimal notation.
DIP Mask When “Network” is selected for the destination IP filter, you can enter a specific DIP mask in dotted
decimal notation.
IPv6 Parameters
Next Header
Filter
Specify the IPv6 next header filter for this ACE.
Any: No IPv6 next header filter is specified (“don’t-care”).
Specific: If you want to filter a specific IPv6 next header filter with this ACE, choose this value. A field
for entering an IPv6 next header filter appears. ICMP: Select ICMP to filter IPv6 ICMP protocol frames.
Extra fields for defining ICMP parameters will appear. These fields are explained later in this help file.
UDP: Select UDP to filter IPv6 UDP protocol frames. Extra fields for defining UDP parameters will
appear. These fields are explained later in this help file.
TCP: Select TCP to filter IPv6 TCP protocol frames. Extra fields for defining TCP parameters will
appear. These fields are explained later in this help file.
Next Header
Value
When “Specific” is selected for the IPv6 next header value, you can enter a specific value. The allowed
range is 0 to 255. A frame that hits this ACE matches this IPv6 protocol value.
SIP Filter Specify the source IPv6 filter for this ACE.
Any: No source IPv6 filter is specified. (Source IPv6 filter is “don’t-care”.)
Specific: Source IPv6 filter is set to Network. Specify the source IPv6 address and source IPv6 mask in
the SIP Address fields that appear.
SIP address When “Specific” is selected for the source IPv6 filter, you can enter a specific SIPv6 address. The field
only supported last 32 bits for IPv6 address.
SIP BitMask When “Specific” is selected for the source IPv6 filter, you can enter a specific SIPv6 mask. The field
only supported last 32 bits for IPv6 address. Notice the usage of bitmask, if the binary bit value is “0”,
it means this bit is “don’t-care”. The real matched pattern is [sipv6_address & sipv6_bitmask] (last 32
bits). For example, if the SIPv6 address is 2001::3 and the SIPv6 bitmask is 0xFFFFFFFE(bit 0 is “don’t-
care” bit), then SIPv6 address 2001::2 and 2001::3 are applied to this rule.
Hop Limit Specify the hop limit settings for this ACE.
zero: IPv6 frames with a hop limit field greater than zero must not be able to match this entry.
non-zero: IPv6 frames with a hop limit field greater than zero must be able to match this entry.
Any: Any value is allowed (“don’t-care”).
ICMP Parameters
ICMP Type
Filter
Specify the ICMP filter for this ACE.
Any: No ICMP filter is specified (ICMP filter status is “don’t-care”).
Specific: If you want to filter a specific ICMP filter with this ACE, you can enter a specific ICMP value. A
field for entering an ICMP value appears.
ICMP Type
Value
When “Specific” is selected for the ICMP filter, you can enter a specific ICMP value. The allowed range
is 0 to 255. A frame that hits this ACE matches this ICMP value.
To Next Page
Loading...
