xStack
®
DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual
ICMP Code - Specifies that the Switch will examine each frame’s ICMP Code field.
IGMP
Type ____ e.g. (0-255) - Specifies that the Switch will examine each frame’s IGMP Type
field.
TCP
Source Port - Specifies a TCP port for the source port.
Mask (0-FFFF) - Specifies a TCP port mask for the source port.
Destination Port - Specifies a TCP port for the destination port.
Mask (0-FFFF) - Specifies a TCP port mask for the destination port.
Flag Bits - Enter the appropriate flag mask parameter. All incoming packets have TCP port
numbers contained in them as the forwarding criterion. These numbers have flag bits
associated with them which are parts of a packet that determine what to do with the packet.
The user may deny packets by denying certain flag bits within the packets.
URG/ACK/PSH/RST/SYN/FIN – Choose among urg (urgent), ack (acknowledgement), psh
(push), rst (reset), syn (synchronize) and fin (finish)
UDP
Source Port - Specifies that the Switch will examine each frame’s Universal Datagram
Protocol (UDP) field for the source port.
Mask (0-FFFF) - Specifies a UDP port mask for the destination port.
Destination Port - Specifies a UDP port for the destination port.
Mask (0-FFFF) - Specifies a UDP port mask for the destination port.
Protocol ID
Protocol ID ___ e.g. (0-255) - Specifies that the Switch will examine the protocol field in each
packet and if this field contains the value entered here, apply the following rules.
Action
Select Permit to specify that the packets that match the access profile are forwarded by the
Switch, according to any additional rule added (see below).
Select Deny to specify the packets that match the access profile are not forwarded by the
Switch and will be filtered.
Select Mirror to specify that packets that match the access profile are mirrored to a port
defined in the config mirror port command. Port Mirroring must be enabled and a target port
must be set.
Priority (0-7)
Enter a priority value if you want to re-write the 802.1p default priority of a packet to the
value entered in the Priority field, which meets the criteria specified previously in this
command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have
its incoming 802.1p user priority re-written to its original value before being forwarded by the
Switch.
Replace Priority
Enter a replace priority manually if you want to re-write the 802.1p default priority of a packet
to the value entered in the Priority field, which meets the criteria specified previously in this
command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have
its incoming 802.1p user priority re-written to its original value before being forwarded by the
Switch
Replace DSCP (0-63)
Select this option to instruct the Switch to replace the DSCP value (in a packet that meets
the selected criteria) with the value entered in the adjacent field.
Time Range Name
Tick the check box and enter the name of the Time Range settings that has been previously
configured in the Time Range Settings window. This will set specific times when this
access rule will be implemented on the Switch.
Counter
Enable or disable the counter settings.
Ports
Enter a range of ports to be configured.
Click Apply to display the following Access Rule List window:
Figure 6 - 14. Access Rule List window for IPv4 example
159