SIP User's Manual
6
.
Configuring
the MediaPack
Version 2.4
159
June 2008
Table
6-22: Access Control List Parameters Description
Parameter
Description
General Settings
Profile Name
Specifies to which ACL the entry should belong. The system supports the
following options:
WAN In: The entry is applied to packets received on the WAN interface
WAN Out: The entry is applied to packets sent on the WAN interface
Command
Instructs the system how to treat the packet. The following options are possible:
Permit: Packets matching the following criteria are permitted and processing of
the access control list continues. If the last matching entry is permitted, the
packet is allowed.
Deny: The packet is discarded and processing or the access control list stops.
Protocol
Specifies the protocol that will be filtered.
Possible options are:
IP: the rule applies to all IP packets
TCP: The rule applies only to TCP packets
UDP: The rule applies only to UDP packets
Source Settings
Type
Select the how the source address should be matched. Possible options are:
Any: All packets match. The source address is not analyzed.
Host: The user can specify a specific source address in the IP address field.
Only packet that match this IP address match
Range: The user can specify a range of IP address which match this rule. The
base IP address is entered in the IP address field. The IP Wildcards field is
used to define the range. For more information see the field IP wildcard
IP Address
If Host or Range is selected, this field contains the host IP address or the base
address for range matching.
IP Wildcards
If Range is selected, this field contains the wildcard bits. The wildcard bits must be
all ones after the first one.
Samples for wildcard matches:
0.0.0.255 is a valid wildcard
0.0.3.255 is a valid wildcard
255.0.0.0 is NOT a valid wildcard.
Wildcard specification is only allowed of range is selected.
Port Match Criteria
It the rule applies to TCP or UDP packets, the user can specify a TCP or UDP port
match criteria. The following criteria can be defined:
None: no port matching is performed
Equal: The rule matches if the port specified in Port Number is used.
Less than: The rule matches if the port of the packet is smaller than the port
specified in the ‘Port Number’ field
Greater Than: The rule matches if the port of the packet is greater than the
port specified in the ‘Port Number’ field.
Range: The rule matches if the port of the packet is in the range specified by
the ‘Port Number’ and the ‘Port End Range’
Port Number
Specify the port number to match. For more information see above
Port End Range
This field is only valid if range is selected. For more information see ‘Port Match
Criteria’
Destination Settings
The Destination settings are identical to the source settings.
