PLANET WGSD-1022 - Manual (Page 79)

follows:
• Permit, by which forwards packets which meet the ACL criteria.
• Deny, which drops packets which meet the ACL criteria.
• Shutdown, where drops packet that meets the ACL criteria, and
disables the port to which the packet was addressed. Ports are
reactivated from the Port Management screen.
• Protocol
By which creates an ACE (Access Control Event) based on a
specific protocol
• Select from List
Where selects from a protocols list on which ACE can be based. The
possible field values are:
• Any, matches the protocol to any protocol.
• EIGRP, which indicates that the Enhanced Interior Gateway
Routing Protocol (EIGRP) is used to classify network flows.
• ICMP, which indicates that the Internet Control Message Protocol
(ICMP) is used to classify network flows.
• IGMP, which indicates that the Internet Group Management
Protocol (IGMP) is used to classify network flows.
• TCP, which indicates that the Transmission Control Protocol is
used to classify network flows.
• OSPF, by which matches the packet to the Open Shortest Path
First (OSPF) protocol.
• UDP, which indicates that the User Datagram Protocol is used to
classify network flows.
• Protocol ID to Match, adds user-defined protocols to which
packets are matched to the ACE. Each protocol has a specific
protocol number which is unique. The possible field range is
0-255.
• TCP Flags
This filters packets by TCP flag. Filtered packets are either forwarded
or dropped. Filtering packets by TCP flags increases packet control,
and network security. The values that can be assigned are:
• Set, which enables filtering packets by selected flags.
• Unset, disables filtering packets by selected flags.
• Don’t care, which indicates that selected packets do not
influence the packet filtering process.
The TCP Flags that can be selected are:
• Urg, indicates the packet is urgent.
• Ack, indicates the packet is acknowledged.
• Psh, indicates the packet is pushed.