|
Type
|
Source filter, destination filter, global filter.
|
DstAddr
|
Destination IP address.
|
DstMask
|
Destination subnet mask.
|
SrcAddr
|
Source IP address.
|
SrcMask
|
Source subnet mask.
|
Id
|
The filter ID (1 to 4096).
|
Name
|
The IP filter name.
|
ProtocolType
|
The IP protocol type (icmp, tcp, udp).
|
ProtocolTypeUsrDefined
|
When the ProtocolType is set to 256 in an IP Filter, this field represents the 8-bit user defined protocol identifier. The default is 0.
|
SrcPort (tcp/udp only)
|
The TCP/UDP source port number.
|
SrcOption (tcp/udp only)
|
The TCP/UDP source port option (ignore, equal, less, greater, or not equal).
|
DstPort (tcp/udp only)
|
The TCP/UDP destination port number.
|
DstOption (tcp/udp only)
|
The TCP/UDP destination port option (ignore, equal, less, greater, or not equal).
|
Mirror
|
Set to enable to mirror the packet to the defined mirror port.
|
TcpConnect (tcp only)
|
Set to enable to allow only TCP connections established from within the network or disable to allow bidirectional establishment.
|
Mode
|
This field can be set to useDefaultAction, forward, dropforwardToNextHop.
|
StopOnMatch
|
Sets the filter to stop on match, the default setting.
|
MatchIcmpRequest
|
Set MatchIcmpRequest to enable if matching on ICMP request packets should be performed.
|
MatchIpFragment
|
Set MatchIpFragment to enable if matching on fragmented IP packets should be performed.
|
EnableStatistic
|
Set EnableStatistic to enable if you want statistics for this filter.
|
NextHopForwardIpAddr (destination/source filter only)
|
Set NextHopForwardIpAddr to apply filter to the next hop.
|
NextHopUnreachableDropEnable (destination/source filter only)
|
Set NextHopUnreachableDropEnable to enable if you want drop action.
|
DiffServMatchDscpEnable
(destination/source filter only)
|
Set to enable to allow a match on the DS field (8 bits), which is composed of the 6-bit DS codepoint (DSCP) and the 2-bit reserved fields.
|
DiffServMatchDscp
|
This field is used to specify the match value for the DSCP. The user must enter a 6-bit binary value, and, by default, the value is 000000. If the DSCP in the incoming packet matches this value, then this filter is applied to the packet.
|
DiffServMatchDscpReserved
|
This field is reserved for future use. The default is a 2-bit binary value of 00 and should not be changed.
|
DiffServModifyIeee8021PEnable
|
Set to enable to allow the IEEE 802.1p field to be modified on packets ingressing DiffServ access ports only. By default, the IEEE 802.1p field is set to zero.
|
DiffServModifyIeee8021P
|
If you do not want the IEEE 802.1p field set to zero, use this field to specify the value of the IEEE 802.1p field. You first must enter a value, set the ModifyIeee8021PEnable field to false, and then set it to true.
|
DiffServModifyDscpEnable
|
Set to enable to allow the DSCP (6 bits) to be modified on packets ingressing DiffServ access ports only. By default, the DS codepoint is set to 000000.
|
DiffServModifyDscp
|
If you do not want the DSCP set to zero, use this field to specify the value of the DSCP. You first must enter a 6-bit value, set the ModifyDscpEnable field to false, and then set it to true.
|
DiffServTrafficProfileId
|
This field is used to specify which traffic profile should be applied to packets matching this filter. A zero value means do not apply any traffic profile.
|
