LevelOne GEP-5070, User Manual

Page: 104 / 318

C
HAPTER
4
| Configuring the Switch
Configuring Security
– 104 –
■
TCP SYN - Specifies the TCP “Synchronize sequence numbers”
(SYN) value for this rule. (Options: Any - any value is allowed,
0 - TCP frames where the SYN field is set must not match this
entry, 1 - TCP frames where the SYN field is set must match this
entry; Default: Any)
■
TCP RST - Specifies the TCP “Reset the connection” (RST) value
for this rule. (Options: Any - any value is allowed, 0 - TCP
frames where the RST field is set must not match this entry, 1 -
TCP frames where the RST field is set must match this entry;
Default: Any)
■
TCP PSH - Specifies the TCP “Push Function” (PSH) value for
this rule. (Options: Any - any value is allowed, 0 - TCP frames
where the PSH field is set must not match this entry, 1 - TCP
frames where the PSH field is set must match this entry;
Default: Any)
■
TCP ACK - Specifies the TCP “Acknowledgment field significant”
(ACK) value for this rule. (Options: Any - any value is allowed,
0 - TCP frames where the ACK field is set must not match this
entry, 1 - TCP frames where the ACK field is set must match this
entry; Default: Any)
■
TCP URG - Specifies the TCP “Urgent Pointer field significant”
(URG) value for this rule. (Options: Any - any value is allowed,
0 - TCP frames where the URG field is set must not match this
entry, 1 - TCP frames where the URG field is set must match this
entry; Default: Any)
■
IP TTL - Specifies the time-to-Live settings for this rule. (Options:
Any - any value is allowed, Non-zero - IPv4 frames with a TTL field
greater than zero must match this entry, Zero - IPv4 frames with a
TTL field greater than zero must not match this entry; Default: Any)
■
IP Fragment - Specifies the fragment offset settings for this rule.
This involves the settings for the More Fragments (MF) bit and the
Fragment Offset (FRAG OFFSET) field for an IPv4 frame. (Options:
Any - any value is allowed, Yes - IPv4 frames where the MF bit is set
or the FRAG OFFSET field is greater than zero must match this
entry, No - IPv4 frames where the MF bit is set or the FRAG OFFSET
field is greater than zero must not match this entry; Default: Any)
■
IP Option - Specifies the options flag setting for this rule. (Options:
Any - any value is allowed, Yes - IPv4 frames where the options flag
is set must match this entry, No - IPv4 frames where the options
flag is set must not match this entry; Default: Any)
■
SIP Filter - Specifies the source IP filter for this rule.
(Options: Any - no source IP filter is specified, Host - specifies the
source IP address in the SIP Address field, Network - specifies the
source IP address and source IP mask in the SIP Address and SIP
Mask fields; Default: Any)