TCP PSH: One of several TCP flag names used only when filtering TCP (urg, ack, psh, rst, syn, and fin).
Specify the TCP "Push” function (PSH) value for this ACE. 0: TCP frames where the PSH field is set must
not be able to match this entry. 1: TCP frames where the PSH field is set must be able to match this
entry. Any: Any value is allowed ("don't-care").
TCP ACK: One of several TCP flag names used only when filtering TCP (urg, ack, psh, rst, syn, and fin).
Specify the TCP "Acknowledgment field significant" (ACK) value for this ACE. 0: TCP frames where the
ACK field is set must not be able to match this entry. 1: TCP frames where the ACK field is set must be
able to match this entry. Any: Any value is allowed ("don't-care").
TCP URG: One of several TCP flag names used only when filtering TCP (urg, ack, psh, rst, syn, and fin).
Specify the TCP "Urgent Pointer field significant" (URG) value for this ACE. 0: TCP frames where the URG
field is set must not be able to match this entry. 1: TCP frames where the URG field is set must be able
to match this entry. Any: Any value is allowed ("don't-care").
UDP Parameters
Source Port Filter: Specify the TCP/UDP source filter for this ACE. Any: No TCP/UDP source filter is
specified (TCP/UDP source filter status is "don't-care"). Specific: If you want to filter a specific TCP/UDP
source filter with this ACE, you can enter a specific TCP/UDP source value. A field for entering a
TCP/UDP source value appears. Range: If you want to filter a specific TCP/UDP source range filter with
this ACE, you can enter a specific TCP/UDP source range value. A field for entering a TCP/UDP source
value appears.
Source Port No.: When "Specific" is selected for the TCP/UDP source filter, you can enter a specific
TCP/UDP source value. The allowed range is 0 to 65535. A frame that hits this ACE matches this
TCP/UDP source value.
Source Port Range: When "Range" is selected for the TCP/UDP source filter, you can enter a specific
TCP/UDP source range value. The allowed range is 0 to 65535. A frame that hits this ACE matches this
TCP/UDP source value.
Dest. Port Filter: When "Specific" is selected for the TCP/UDP destination filter, you can enter a specific
TCP/UDP destination value. The allowed range is 0 to 65535. A frame that hits this ACE matches this
TCP/UDP destination value.
Destination Port Range: When "Range" is selected for the TCP/UDP destination filter, you can enter a
specific TCP/UDP destination range value. The allowed range is 0 to 65535. A frame that hits this ACE
matches this TCP/UDP destination value.
Ethernet Type Parameters
The Ethernet Type parameters can be configured when Frame Type "Ethernet Type" is selected.
EtherType Filter: Specify the Ethernet type filter for this ACE. Any: No EtherType filter is specified
(EtherType filter status is "don't-care"). Specific: If you want to filter a specific EtherType filter with this
ACE, you can enter a specific EtherType value. A field for entering a EtherType value appears.
Ethernet Type Value: When "Specific" is selected for the EtherType filter, you can enter a specific
EtherType value. The allowed range is 0x600 to 0xFFFF but excluding 0x800(IPv4), 0x806(ARP) and
0x86DD(IPv6). A frame that hits this ACE matches this EtherType value.
Access Control List Configuration Example
To Next Page
Loading...