Enterasys SecureStack C2 - Valid Values for Policy Classification Rules

set policy rule
SecureStack C2 Configuration Guide 9-11
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
Table 9‐3providesthesetpolicyruledatavaluesthatcanbe enteredforaparticularclassification
type,andthemaskbitsthatcanbeenteredforeachclassifierassociatedwiththatparameter.
udpdestport ClassifiesbasedonUDPdestinationport.
udpsourceport ClassifiesbasedonUDPsourceport.
data Specifiesthecodefora
predefinedclassifier.Thisvalueisdependenton
theclassificationtypeentered.RefertoTable 9‐3forvalidvaluesforeach
classificationtype.
maskmask (Optional)Specifiesthenumberofsignificantbitstomatch,dependenton
thedatavalueentered.RefertoTable 9‐3forvalidvaluesforeach
classificationtypeand
datavalue.
vlanvlan ClassifiestoaVLANID.
coscos SpecifiesthatthisrulewillclassifytoaClass‐of‐ServiceID.Validvalues
are0‐4095.Avalueof‐1indicatesthatnoCoSforwardingbehavior
modificationisdesired.(NotsupportedonB3,C3,andG3.)
drop|forward Specifies
thatpacketswithinthisclassificationwillbedroppedor
forwarded.
Table 9-3 Valid Values for Policy Classification Rules
Classification Rule Parameter data value mask bits
ether Type field in Ethernet II packet:
1536 - 65535 or 0x600 - 0xFFFF
1- 16
icmptype ICMP Type: a.b 1- 16
ipproto Protocol field in IP packet:
0 - 255 or 0 - 0xFF
1- 8
Destination or Source IP Address:
ipdestsocket
ipsourcesocket
IP Address in dotted decimal
format: 000.000.000.000 and
(Optional) post-fixed port: 0 -
65535
1 - 48
iptos Type of Service field in IP packet:
0 - 255 or 0 - 0xFF
1- 8
Destination or Source MAC:
macdest
macsource
MAC Address: 00-00-00-00-00-
00
1 - 48
Destination or Source TCP port:
tcpdestport
tcpsourceport
TCP Port Number:
0 - 65535 or 0 - 0xFFFF
1 - 16