182
1.877.877.2269
BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 11: ACCESS CONTROL
Specific: Source IPv6 filter is set to Network. Specify the source IPv6 address and source IPv6 mask in the SIP Address fields that
appear.
SIP Address: When “Specific” is selected for the source IPv6 filter, you can enter a specific SIPv6 address. The field only supports the
last 32 bits for IPv6 address.
SIP BitMask: When “Specific” is selected for the source IPv6 filter, you can enter a specific SIPv6 mask. The field only supports last
32 bits for IPv6 address. Notice the usage of bitmask, if the binary bit value is “0”, it means this bit is “don’t-care”. The real matched
pattern is [sipv6_address & sipv6_bitmask] (last 32 bits). For example, if the SIPv6 address is 2001::3 and the SIPv6 bitmask is
0xFFFFFFFE(bit 0 is “don’t-care” bit), then SIPv6 address 2001::2 and 2001::3 are applied to this rule.
Hop Limit: Specify the hop limit settings for this ACE.
zero: IPv6 frames with a hop limit field greater than zero must not be able to match this entry.
non-zero: IPv6 frames with a hop limit field greater than zero must be able to match this entry.
Any: Any value is allowed (“don’t-care”).
ICMP Parameters
ICMP Type Filter: Specify the ICMP filter for this ACE.
Any: No ICMP filter is specified (ICMP filter status is “don’t-care”).
Specific: If you want to filter a specific ICMP filter with this ACE, you can enter a specific ICMP value. A field for entering an ICMP
value appears.
ICMP Type Value: When “Specific” is selected for the ICMP filter, you can enter a specific ICMP value. The allowed range is 0 to 255. A
frame that hits this ACE matches this ICMP value.
ICMP Code Filter: Specify the ICMP code filter for this ACE.
Any: No ICMP code filter is specified (ICMP code filter status is “don’t-care”).
Specific: If you want to filter a specific ICMP code filter with this ACE, you can enter a specific ICMP code value. A field for entering
an ICMP code value appears.
ICMP Code Value: When “Specific” is selected for the ICMP code filter, you can enter a specific ICMP code value. The allowed range is
0 to 255. A frame that hits this ACE matches this ICMP code value.
TCP/UDP Parameters
TCP/UDP Source Filter: Specify the TCP/UDP source filter for this ACE.
Any: No TCP/UDP source filter is specified (TCP/UDP source filter status is “don’t-care”).
Specific: If you want to filter a specific TCP/UDP source filter with this ACE, you can enter a specific TCP/UDP source value. A field
for entering a TCP/UDP source value appears.
Range: If you want to filter a specific TCP/UDP source range filter with this ACE, you can enter a specific TCP/UDP source range
value. A field for entering a TCP/UDP source value appears.
TCP/UDP Source No.: When “Specific” is selected for the TCP/UDP source filter, you can enter a specific TCP/UDP source value. The
allowed range is 0 to 65535. A frame that hits this ACE matches this TCP/UDP source value.
TCP/UDP Source Range: When “Range” is selected for the TCP/UDP source filter, you can enter a specific TCP/UDP source range
value. The allowed range is 0 to 65535. A frame that hits this ACE matches this TCP/UDP source value.
TCP/UDP Destination Filter: Specify the TCP/UDP destination filter for this ACE.
Any: No TCP/UDP destination filter is specified (TCP/UDP destination filter status is “don’t-care”).
Specific: If you want to filter a specific TCP/UDP destination filter with this ACE, you can enter a specific TCP/UDP destination value.
A field for entering a TCP/UDP destination value appears.
Range: If you want to filter a specific range TCP/UDP destination filter with this ACE, you can enter a specific TCP/UDP destination
range value. A field for entering a TCP/UDP destination value appears.
