SW3-L3
GIGABIT/FAST ETHERNET SWITCH/ROUTER TYPE SW3-L3
93/180
USER GUIDE - M0SW3M1902Iv07 - V06 February 2019
•
Destination.
This allows the IP source of the traffic to be specified, i.e., to a
specific IP address or from any IP address (
any
). The default value is
any.
The
specification of a particular IP address requires the values to be entered in the IP
address
format.
Example:
Subnet
(192.168.50.0/255.255.255.0
or
192.168.50.0/24) or Host (192.168.50.5/255.255.255.255 or 192.168.50.5/32 or
192.168.50.5).
•
Service.
This allows any type of traffic to be specified (
any
) or a specific traffic
(
tcp/udp/icmp)
. The default value is
any.
If a specific traffic is indicated, the port
number can be indicated together with the service, if required (1÷65535) or a
range. Example: tcp or tcp:23 or udp:5001-5005.
•
Dir.
This allows the traffic way to be specified, i.e., whether it is incoming (
in
) or
outgoing (
out
).
in:
incoming by Vlan In and outgoing by Vlan Out.
out:
incoming by Vlan Out and outgoing by Vlan In.
•
Policy.
This allows the filtering policy to be specified (
accept
,
drop
or
reject
).
When the filtering policy is
accept
, only packets complying with the selected rule
are accepted. When the filtering policy is
drop
, on the other hand, packets
complying with the selected rule are dropped. The
reject
filtering policy also rules
out packets complying with the selected rule, but unlike drop, when the packet is
ruled out, the appropriate ICMP message is sent to the source address of the
packet.
•
Description.
This permits a description of up to 15 alphanumerical characters to
be specified.
•
Default Policy.
This allows the behaviour of the equipment filtering to be
determined as regards not being included in any specific rule of the respective
section.
•
Vlan In y Vlan Out.
Identifiers for the virtual interfaces. In this case allows the
identification of traffic, generically, taking into account the input device or the one
calculated as output, so that allows rules with generic character as it is independent
from IP addressing.
