VLAN Parameters
802.1Q Tagged: Specify whether frames can hit the action according to the 802.1Q tagged. The
allowed values are: Any: Any value is allowed ("don't-care"). Enabled: Tagged frame only. Disabled:
Untagged frame only. The default value is "Any".
VLAN ID Filter: Specify the VLAN ID filter for this ACE. Any: No VLAN ID filter is specified. (VLAN ID
filter status is "don't-care".) Specific: If you want to filter a specific VLAN ID with this ACE, choose this
value. A field for entering a VLAN ID number displays.
VLAN ID: When "Specific" is selected for the VLAN ID filter, you can enter a specific VLAN ID number.
The valid range is 1 to 4094. A frame that hits this ACE matches this VLAN ID value.
Tag Priority: Specify the tag priority for this ACE. A frame that hits this ACE matches this tag priority.
The valid number range is 0 to 7. The value Any means that no tag priority is specified (tag priority is
"don't-care".)
ARP Parameters
The ARP parameters can be configured when Frame Type "ARP" is selected.
ARP/RARP: Specify the available ARP/RARP opcode (OP) flag for this ACE.
Any: No ARP/RARP OP flag is specified. (OP is "don't-care".)
ARP: Frame must have ARP opcode set to ARP.
RARP: Frame must have RARP opcode set to RARP.
Other: Frame has unknown ARP/RARP Opcode flag.
Request/Reply: Specify the available Request/Reply opcode (OP) flag for this ACE. Any: No
Request/Reply OP flag is specified. (OP is "don't-care".) Request: Frame must have ARP Request or
RARP Request OP flag set. Reply: Frame must have ARP Reply or RARP Reply OP flag.
Sender IP Filter: Specify the sender IP filter for this ACE. Any: No sender IP filter is specified. (Sender IP
filter is "don't-care".) Host: Sender IP filter is set to Host. Specify the sender IP address in the SIP
Address field that appears. Network: Sender IP filter is set to Network. Specify the sender IP address
and sender IP mask in the SIP Address and SIP Mask fields that appear.
Sender IP Address: When "Host" or "Network" is selected for the sender IP filter, you can enter a
specific sender IP address in dotted decimal notation. Notice the invalid IP address configuration is
acceptable too, for example, 0.0.0.0. Normally, an ACE with invalid IP address will explicitly adding deny
action.
Sender IP Mask: When "Network" is selected for the sender IP filter, you can enter a specific sender IP
mask in dotted decimal notation.
Target IP Filter: Specify the target IP filter for this specific ACE. Any: No target IP filter is specified.
(Target IP filter is "don't-care".) Host: Target IP filter is set to Host. Specify the target IP address in the
Target IP Address field that appears. Network: Target IP filter is set to Network. Specify the target IP
address and target IP mask in the Target IP Address and Target IP Mask fields that appear.
Target IP Address: When "Host" or "Network" is selected for the target IP filter, you can enter a specific
target IP address in dotted decimal notation. Notice the invalid IP address configuration is acceptable
too, for example, 0.0.0.0. Normally, an ACE with invalid IP address will explicitly adding deny action.
Target IP Mask: When "Network" is selected for the target IP filter, you can enter a specific target IP
mask in dotted decimal notation.
ARP Sender MAC Match: Specify whether frames can hit the action according to their sender
hardware address field (SHA) settings. 0: ARP frames where SHA is not equal to the SMAC address. 1:
ARP frames where SHA is equal to the SMAC address. Any: Any value is allowed ("don't-care").
To Next Page
Loading...