180
1.877.877.2269
BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 11: ACCESS CONTROL
Network: Target IP filter is set to Network. Specify the target IP address and target IP mask in the Target IP Address and Target IP
Mask fields that appear.
Target IP Address: When “Host” or “Network” is selected for the target IP filter, you can enter a specific target IP address in dotted
decimal notation.
Target IP Mask: When “Network” is selected for the target IP filter, you can enter a specific target IP mask in dotted decimal notation.
ARP Sender MAC Match: Specify whether frames can hit the action according to their sender hardware address field (SHA) settings.
0: ARP frames where SHA is not equal to the SMAC address.
1: ARP frames where SHA is equal to the SMAC address.
Any: Any value is allowed (“don’t-care”).
RARP Target MAC Match: Specify whether frames can hit the action according to their target hardware address field (THA) settings.
0: RARP frames where THA is not equal to the target MAC address.
1: RARP frames where THA is equal to the target MAC address.
Any: Any value is allowed (“don’t-care”).
IP/Ethernet Length: Specify whether frames can hit the action according to their ARP/RARP hardware address length (HLN) and
protocol address length (PLN) settings.
0: ARP/RARP frames where the HLN is not equal to Ethernet (0x06) or the (PLN) is not equal to IPv4 (0x04).
1: ARP/RARP frames where the HLN is equal to Ethernet (0x06) and the (PLN) is equal to IPv4 (0x04).
Any: Any value is allowed (“don’t-care”).
Ethernet: Specify whether frames can hit the action according to their ARP/RARP hardware address space (HRD) settings.
0: ARP/RARP frames where the HLD is not equal to Ethernet (1).
1: ARP/RARP frames where the HLD is equal to Ethernet (1).
Any: Any value is allowed (“don’t-care”).
IP: Specify whether frames can hit the action according to their ARP/RARP protocol address space (PRO) settings.
0: ARP/RARP frames where the PRO is not equal to IP (0 x 800).
1: ARP/RARP frames where the PRO is equal to IP (0 x 800).
Any: Any value is allowed (“don’t-care”).
IP Parameters
The IP parameters can be configured when Frame Type “IPv4” is selected.
IP Protocol Filter: Specify the IP protocol filter for this ACE.
Any: No IP protocol filter is specified (“don’t-care”).
Specific: If you want to filter a specific IP protocol filter with this ACE, choose this value. A field for entering an IP protocol filter
appears.
ICMP: Select ICMP to filter IPv4 ICMP protocol frames. Extra fields for defining ICMP parameters will appear.
UDP: Select UDP to filter IPv4 UDP protocol frames. Extra fields for defining UDP parameters will appear.
TCP: Select TCP to filter IPv4 TCP protocol frames. Extra fields for defining TCP parameters will appear.
IP Protocol Value: When “Specific” is selected for the IP protocol value, you can enter a specific value. The allowed range is 0 to 255. A
frame that hits this ACE matches this IP protocol value.
IP TTL: Specify the Time-to-Live settings for this ACE.
zero: IPv4 frames with a Time-to-Live field greater than zero must not be able to match this entry.
non-zero: IPv4 frames with a Time-to-Live field greater than zero must be able to match this entry.
