4 acl ports configuration – Interlogix NS3550-8T-2S User Manual User Manual

Page 192

Advertising
background image

User’s Manual of NS3550-8T-2S

192

status is "don't-care").
Specific

: If you want to filter a specific TCP/UDP destination filter with this ACE,

you can enter a specific TCP/UDP destination value. A field for entering a
TCP/UDP destination value appears.
Range

: If you want to filter a specific range TCP/UDP destination filter with this

ACE, you can enter a specific TCP/UDP destination range value. A field for
entering a TCP/UDP destination value appears.

TCP/UDP Destination
Number

When "Specific" is selected for the TCP/UDP destination filter, you can enter a
specific TCP/UDP destination value. The allowed range is 0 to 65535. A frame
that hits this ACE matches this TCP/UDP destination value.

TCP/UDP Destination

Range

When "Range" is selected for the TCP/UDP destination filter, you can enter a
specific TCP/UDP destination range value. The allowed range is 0 to 65535. A
frame that hits this ACE matches this TCP/UDP destination value.

TCP FIN

Specify the TCP "No more data from sender" (FIN) value for this ACE.
0

: TCP frames where the FIN field is set must not be able to match this entry.

1

: TCP frames where the FIN field is set must be able to match this entry.

Any

: Any value is allowed ("don't-care").

TCP SYN

Specify the TCP "Synchronize sequence numbers" (SYN) value for this ACE.
0

: TCP frames where the SYN field is set must not be able to match this entry.

1

: TCP frames where the SYN field is set must be able to match this entry.

Any

: Any value is allowed ("don't-care").

TCP RST

Specify the TCP "Reset the connection" (RST) value for this ACE.
0

: TCP frames where the RST field is set must not be able to match this entry.

1

: TCP frames where the RST field is set must be able to match this entry.

Any

: Any value is allowed ("don't-care").

TCP PSH

Specify the TCP "Push Function" (PSH) value for this ACE.
0

: TCP frames where the PSH field is set must not be able to match this entry.

1

: TCP frames where the PSH field is set must be able to match this entry.

Any

: Any value is allowed ("don't-care").

TCP ACK

Specify the TCP "Acknowledgment field significant" (ACK) value for this ACE.
0

: TCP frames where the ACK field is set must not be able to match this entry.

1

: TCP frames where the ACK field is set must be able to match this entry.

Any

: Any value is allowed ("don't-care").

TCP URG

Specify the TCP "Urgent Pointer field significant" (URG) value for this ACE.
0

: TCP frames where the URG field is set must not be able to match this entry.

1

: TCP frames where the URG field is set must be able to match this entry.

Any

: Any value is allowed ("don't-care").

Ethernet Type Parameters

The Ethernet Type parameters can be configured when Frame Type "Ethernet Type" is selected.

Object

Description

EtherType Filter

Specify the Ethernet type filter for this ACE.
Any

: No EtherType filter is specified (EtherType filter status is "don't-care").

Specific

: If you want to filter a specific EtherType filter with this ACE, you can

enter a specific EtherType value. A field for entering a EtherType value appears.

Ethernet Type Value

When "Specific" is selected for the EtherType filter, you can enter a specific
EtherType value. The allowed range is 0x600 to 0xFFFF but excluding
0x800(IPv4), 0x806(ARP) and 0x86DD(IPv6). A frame that hits this ACE matches
this EtherType value.


Buttons

: Click to save changes.

: Click to undo any changes made locally and revert to previously saved values.

: Return to the previous page.

4.10.4 ACL Ports Configuration

Configure the ACL parameters (ACE) of each switch port. These parameters will affect frames received on a port unless the
frame matches a specific ACE.
The ACL Ports Configuration screen in

Figure 4-10-4

appears.

Advertising