Planet IGSW-2840, User Manual

Page: 312 / 671

User’s Manual of IGSW-2840
312
The page includes the following fields:
Object Description
Action An ACL can contain any combination of permit or deny rules.
(Default: Permit rules)
Source/Destination
Address Type
Specifies the source or destination IP address. Use “Any” to include all possible
addresses, “Host” to specify a specific host address in the Address field, or “IP”
to specify a range of addresses with the Address and SubMask fields.
Options: Any, Host , IP;
Default: Any
Source/Destination IP
Address
Source or destination IP address.
Source/Destination
Subnet Mask
Subnet mask for source or destination address.
(See the description for Subnet Mask.)
Service Type Packet priority settings based on the following criteria:
- Precedence – IP precedence level. (Range: 0-7)
- DSCP – DSCP priority level. (Range: 0-63)
Protocol Specifies the protocol type to match as TCP, UDP or Others, where others
indicates a specific protocol number (0-255).
Options: TCP, UDP, Others;
Default: TCP
Source/Destination Port
Start
Source/destination port number for the specified protocol type.
(Range: 0-65535)
Source/Destination Port
End
Upper bound of the protocol port range.
(Range: 0-65535)
Control Flag Decimal number (representing a bit string) that specifies flag bits in byte 14 of the
TCP header. (Range: 0-63)
You can specify both Precedence and ToS in the same rule. However, if DSCP is
used, then neither Precedence nor ToS can be specified.
The following control codes may be specified:
-1 (fin) – Finish
-2 (syn) – Synchronize
-4 (rst) – Reset
-8 (psh) – Push
-16 (ack) – Acknowledgement
-32 (urg) – Urgent pointer
To define more than one control code, set the equivalent binary bit to “1” to
indicate the required codes. For example, to set both SYN and ACK valid, set the
control flag to 18.