
632 Chapter 67 Configuring IP Filter Rules
N0060606N0060606
Filter Criteria
Protocol TCP, UDP, TCP/UDP, ICMP,
OSPF, IPSEC_AH,
IPSEC_ESP, IGNORE, or
CUSTOM
Specify the protocol type of the packet to be filtered.
If you choose CUSTOM, the value provided in the
Protocol Value attribute will be used.
Default: IGNORE.
Protocol value <0 to 255> Specify a custom protocol value not available in the
Protocol attribute.
This attribute can only be set if Protocol is set to
CUSTOM.
Source routing Present
Absent
Ignore
Specify how the Source Routing is checked.
Present: Rule matches only if the packet has the source
routing option set.
Absent: Rule matches only if the packet does not have
the source routing option set.
Ignore: The source routing option in the packet is not
checked and therefore all packets will match.
Default: Ignore.
IP options Present
Absent
Ignore
Specify how the IP Options are checked.
Present: Rule matches only if the packet has the IP
options set.
Absent: Rule matches only if the packet does not have
the IP options set.
Ignore: The IP options in the packet are not checked and
therefore all packets will match.
Default: Ignore.
QoS value EF, CS7, CS6, CS5, CS4,
CS3, CS2, CS1, AF41, AF42,
AF43, AF31, AF32, AF33,
AF21, AF22, AF23, AF11,
AF12, AF13, DF(CS0), None,
or CUSTOM
Select a DiffServ Code Point (DSCP) value to match the
filter from the list.
If you choose CUSTOM, the value provided in the ToS
Byte attribute will be used.
Note: The DSCP value is the 6-bit field of the ToS byte.
Default: None.
ToS byte <0-255> Specify a custom ToS byte value not available in the
DSCP attribute.
Note: This value applies to the 8-bit field of the ToS byte.
This attribute can only be set if QoS Value is set to
CUSTOM.
Default: 0
Addresses
Source IP Type Fixed
Dynamic
Specify if the Source IP is Fixed or Dynamic.
Use Dynamic when the IP is assigned by an outside
source. For example, your Internet Service Provider (ISP)
assigns your IP address. If you specify Dynamic, Source
IP and Source IP Mask do not need to be entered.
The default is Fixed.
Note: Dynamic does not match all IP addresses. If you
want to match all IP addresses, enter an IP address of
0.0.0.0 and a mask of 0.0.0.0.
Table 154 Add Inbound Filter Rule (Sheet 3 of 5)
Attribute Value Description
Komentarze do niniejszej Instrukcji