Planet IGS-10020, Руководство пользователя

Страница: 244 / 409

User’s Manual
244
usage of bitmask, if the binary bit value is "0", it means this bit is "don't-care".
The real matched pattern is [sipv6_address & sipv6_bitmask] (last 32 bits). For
example, if the SIPv6 address is 2001::3 and the SIPv6 bitmask is
0xFFFFFFFE(bit 0 is "don't-care" bit), then SIPv6 address 2001::2 and 2001::3
are applied to this rule.
•
Hop Limit
Specify the hop limit settings for this ACE.
■
zero
: IPv6 frames with a hop limit field greater than zero must not be able
to match this entry.
■
non-zero
: IPv6 frames with a hop limit field greater than zero must be able
to match this entry.
■
Any
: Any value is allowed ("don't-care”).

ICMP Parameters
Object Description
•
ICMP Type Filter
Specify the ICMP filter for this ACE.
■
Any
: No ICMP filter is specified (ICMP filter status is "don't-care").
■
Specific
: If you want to filter a specific ICMP filter with this ACE, you can
enter a specific ICMP value. A field for entering an ICMP value appears.
•
ICMP Type Value
When "Specific" is selected for the ICMP filter, you can enter a specific ICMP
value.
The allowed range is
0
to
255
. A frame that hits this ACE matches this ICMP
value.
•
ICMP Code Filter
Specify the ICMP code filter for this ACE.
■
Any
: No ICMP code filter is specified (ICMP code filter status is
"don't-care").
■
Specific
: If you want to filter a specific ICMP code filter with this ACE, you
can enter a specific ICMP code value. A field for entering an ICMP code
value appears.
•
ICMP Code Value
When "Specific" is selected for the ICMP code filter, you can enter a specific
ICMP code value.
The allowed range is
0
to
255
. A frame that hits this ACE matches this ICMP
code value.

TCP/UDP Parameters
Object Description
•
TCP/UDP Source Filter
Specify the TCP/UDP source filter for this ACE.