181
1.877.877.2269
BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 11: ACCESS CONTROL
Any: Any value is allowed (“don’t-care”).
IP Fragment: Specify the fragment offset settings for this ACE. This involves the settings for the More Fragments (MF) bit and the
Fragment Offset (FRAG OFFSET) field for an IPv4 frame.
No: IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must not be able to match this entry.
Yes: IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must be able to match this entry.
Any: Any value is allowed (“don’t-care”).
IP Option: Specify the options flag setting for this ACE.
No: IPv4 frames where the options flag is set must not be able to match this entry.
Yes: IPv4 frames where the options flag is set must be able to match this entry.
Any: Any value is allowed (“don’t-care”).
SIP Filter: Specify the source IP filter for this ACE.
Any: No source IP filter is specified. (Source IP filter is “don’t-care”.)
Host: Source IP filter is set to Host. Specify the source IP address in the SIP Address field that appears.
Network: Source IP filter is set to Network. Specify the source IP address and source IP mask in the SIP Address and SIP Mask
fields that appear.
SIP Address: When “Host” or “Network” is selected for the source IP filter, you can enter a specific SIP address in dotted decimal
notation.
SIP Mask: When “Network” is selected for the source IP filter, you can enter a specific SIP mask in dotted decimal notation.
DIP Filter: Specify the destination IP filter for this ACE.
Any: No destination IP filter is specified. (Destination IP filter is “don’t-care”.)
Host: Destination IP filter is set to Host. Specify the destination IP address in the DIP Address field that appears.
Network: Destination IP filter is set to Network. Specify the destination IP address and destination IP mask in the DIP Address and
DIP Mask fields that appear.
DIP Address: When “Host” or “Network” is selected for the destination IP filter, you can enter a specific DIP address in dotted decimal
notation.
DIP Mask: When “Network” is selected for the destination IP filter, you can enter a specific DIP mask in dotted decimal notation.
IPv6 Parameters
The IPv6 parameters can be configured when Frame Type “IPv6” is selected.
Next Header Filter: Specify the IPv6 next header filter for this ACE.
Any: No IPv6 next header filter is specified (“don’t-care”).
Specific: If you want to filter a specific IPv6 next header filter with this ACE, choose this value. A field for entering an IPv6 next
header filter appears.
ICMP: Select ICMP to filter IPv6 ICMP protocol frames. Extra fields for defining ICMP parameters will appear.
UDP: Select UDP to filter IPv6 UDP protocol frames. Extra fields for defining UDP parameters will appear.
TCP: Select TCP to filter IPv6 TCP protocol frames. Extra fields for defining TCP parameters will appear.
Next Header Value: When “Specific” is selected for the IPv6 next header value, you can enter a specific value. The allowed range is 0 to
255. A frame that hits this ACE matches this IPv6 protocol value.
SIP Filter: Specify the source IPv6 filter for this ACE.
Any: No source IPv6 filter is specified. (Source IPv6 filter is “don’t-care”.)
