Supermicro SSE-F3548S - Page 247

Supermicro SSE-F3548S/SSE-F3548SR Configuration User’s Guide
247
Destination IP
Address Mask
Configured destination subnet IP mask. For host IP address, the mask will
be displayed as 255.255.255.255.
In Port List
The list of ports this ACL is applied to. If it is applied to all ports, this will
be ALL.
Out Port
The egress port configured for this ACL. If no egress port configured, this
will be ALL.
Filter Action
Configured ACL action rule – deny or permit or redirect
Status
Current status of the ACL. The status should normally be active always.
In case of configuration errors, the ACL status may be inactive.
The following fields are displayed for TCP and UDP rules
Source Ports From
Starting TCP/UDP source port. If the ACL needs to be applied to only one
port, the “Ports From” will specify that port. If the ACL needs to be
applied to all ports, “Ports From” will be 0.
Source Ports Till
Starting TCP/UDP source port. If the ACL needs to be applied to only one
port, the “Ports Till” will specify that port. If this ACL needs to be applied
to all ports, “Ports Till” will be 65535.
Destination Ports
From
Starting TCP/UDP destination port. If the ACL needs to be applied to only
one port, the “Ports From” will specify that port. If the ACL needs to be
applied to all ports, “Ports From” will be 0.
Destination Ports Till
Starting TCP/UDP destination port. If the ACL needs to be applied to only
one port, the “Ports Till” will specify that port. If the ACL needs to be
applied to all ports, “Ports Till” will be 65535.
The following fields are displayed only for TCP rules
RST bit
If the ACL is applied only to TCP Reset messages
ACK bit
If the ACL is applied only to TCP acknowledgement messages
The following fields are displayed only for ICMP rules
ICMP type
Displays ICMP types if the ACL is applied only to particular ICMP
messages.
Displays “No ICMP types to be filtered” if the ACL is applied to all ICMP
message types.
ICMP code
Displays ICMP message codes if the ACL is applied only to particular
ICMP message codes.
Displays “No ICMP codes to be filtered” if the ACL is applied to all ICMP
message codes.
The examplesbelow display different IP Extended ACLs.
IP Extended ACLs with IP/OSPF/PIM rules display the following fields:
Filter Priority : 1