SMC Networks 6724AL2, Руководство по управлению

Страница: 91 / 424

A
CCESS
C
ONTROL
L
ISTS
2-59
•
Control Flag
– Decimal number (representing a bit string) that
specifies flag bits in byte 14 of the TCP header. (Range: 0-63)
•
Control Bitmask
– Decimal number representing the code bits to
match.
The control bitmask is a decimal number (for an equivalent binary bit
mask) that is applied to the control code. Enter a decimal number,
where the equivalent binary bit “1” means to match a bit and “0”
means to ignore a bit. The following bits may be specified:
- 1 (fin) – Finish
- 2 (syn) – Synchronize
- 4 (rst) – Reset
- 8 (psh) – Push
- 16 (ack) – Acknowledgement
- 32 (urg) – Urgent pointer
For example, use the code value and mask below to catch packets with
the following flags set:
- SYN flag valid, use “control-flag 2 2”
- Both SYN and ACK valid, use “control-flag 18 18”
- SYN valid and ACK invalid, use “control-flag 2 18”
ACL Configuration – Configuring a MAC ACL
•
Action
– An ACL can contain all permit rules or all deny rules.
(Default: Permit rules)
•
Source/Destination MAC
– Source or destination MAC.
•
Source/Destination MAC Address
– Source or destination MAC
address.
•
Source/Destination BitMask
– Binary mask for source or
destination MAC address.