Security
HMG-838PT & HMG-838EPT Web Configuration 5-32
frames where the options flag is set must match this entry. “No” denotes that Pv4 frames where the options flag is
set must not match this entry
SIP Filter: Select “Any”, “Host”, or “Network” for source IP filtering. If “Host” is selected, you need to indicate a
specific host IP address. If “Network” is selected, you need to indicate both network address and subnet mask.
SIP Address: Specify a source IP address.
SIP Mask: Specify a source subnet mask.
DIP Filter: Select “Any”, “Host”, or “Network” for destination IP filtering. If “Host” is selected, you need to indicate a
specific host IP address. If “Network” is selected, you need to indicate both network address and subnet mask.
DIP Address: Specify a destination IP address.
DIP Mask: Specify a destination subnet mask.
IPv6 Parameters
Next Header Filter: Select next header filter option. Available options include ICMP, UDP, TCP, Other.
SIP Filter: Select a source IP filter. “Any” denotes that any SIP filter is allowed. Select “Specific” to enter
self-define SIP filter.
Hop Limit: Select “Any” to allow any values in this field. Select” “0” if IPv6 frames with a hop limit field greater than
zero must not be able to match this entry. “1” denotes that IPv6 frames with a hop limit field greater than zero must
be able to match this entry.
5-2.3.4 ACL Status
This page shows the ACL status by different ACL users. Each row describes the ACE that is defined. It is a conflict if a
specific ACE is not applied to the hardware due to hardware limitations. The maximum number of ACEs is 256 on each
switch.
ACL Status:
User: Display the ACL user.
ACE: Display ACE entry ID.
Frame Type: Display the frame type of the ACE. Possible values are:
Any: The ACE will match any frame type.
EType: The ACE will match Ethernet Type frames. Note that an Ethernet Type based ACE will not get
matched by IP and ARP frames.
ARP: The ACE will match ARP/RARP frames.
IPv4: The ACE will match all IPv4 frames.
IPv4/ICMP: The ACE will match IPv4 frames with ICMP protocol.
IPv4/UDP: The ACE will match IPv4 frames with UDP protocol.
IPv4/TCP: The ACE will match IPv4 frames with TCP protocol.
IPv4/Other: The ACE will match IPv4 frames, which are not ICMP/UDP/TCP.
IPv6: The ACE will match all IPv6 standard frames.
Action: Display the forwarding action of the ACE.
Permit: Frames matching the ACE may be forwarded and learned.
Deny: Frames matching the ACE may be forwarded and learned.
Filtered: Frames matching the ACE are filtered.