Source IP Mask

Destination IP Mask

DSCP

Protocol

Port

Enter an IP address mask for the source IP address. Enter an IP address mask for the destination IP address.

Selecting this option instructs the Switch to examine the DiffServ Code part of each packet header and use this as the, or part of the criterion for forwarding.

Selecting this option instructs the Switch to examine the protocol type value in each frame's header.You must then specify what protocol(s) to include according to the following guidelines:

Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header.

Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value.

Select IGMP to instruct the Switch to examine the Internet Group Management Protocol (IGMP) field in each frame's header.

Select Type to further specify that the access profile will apply an IGMP type value.

Select TCP to use the TCP port number contained in an incoming packet as the forwarding criterion. Selecting TCP requires that you specify a source port mask and/or a destination port mask.The user may also identify which flag bits to filter. Flag bits are parts of a packet that determine what to do with the packet.The user may filter packets by filtering certain flag bits within the packets, by checking the boxes corresponding to the flag bits of the TCP field.The user may choose between urg (urgent), ack (acknowledgement), psh (push), rst (reset), syn (synchronize), fin (finish).

src port mask – Specify a TCP port mask for the source port in hex form (hex 0x0-0xffff), which you wish to deny.

dest port mask – Specify a TCP port mask for the destination port in hex form (hex 0x0-0xffff) which you wish to deny.

Select UDP to use the UDP port number contained in an incoming packet as the forwarding criterion. Selecting UDP requires that you specify a source port mask and/or a destination port mask.

src port mask – Specify a TCP port mask for the source port in hex form (hex 0x0-0xffff). dest port mask – Specify a TCP port mask for the destination port in hex form (hex 0x0-0xffff).

protocol id – Enter a value defining the protocol ID in the packet header to mask. Specify the protocol ID mask in hex form (hex 0x0-0xffffffff).

The user may set the Access Profile Table on a per-port basis by entering an entry in this field. Entering all will denote all ports on the Switch.The port list is specified by listing the lowest switch number and the beginning port number on that switch, separated by a colon.Then the highest switch number, and the highest port number of the range (also separated by a colon) are specified.The beginning and end of the port list range are separated by a dash. For example, 1:3 specifies switch number 1, port 3. 2:4 specifies switch number 2, port 4. 1:3 - 2:4 specifies all of the ports between switch 1, port 3 and switch 2, port 4 •in numerical order. Entering all will denote all ports on the Switch.

The page shown below is the Packet Content Mask configuration window.

Figure 6- 63.Access Profile Configuration window (Packet Content Mask)

78

Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet Switch

Page 79
Image 79
Allied Telesis AT-9724TS specifications Source IP Mask Destination IP Mask, Dscp, Protocol Port