Siemens E-110-I Field Description Dest Port, TCP Flag, Icmp Type, Icmp Code, IP Frag Pkt

	Chapter 4: Advanced Configuration
Field	Description
Dest Port	Port number criteria for the destination computer(s) (i.e., the port number of the
	type of computer to which the packet is being sent).
	This field will be dimmed (unavailable for entry) unless you have selected TCP or
	UDP as the protocol.
	See the description of Src IP Address for the selection options.
TCP Flag	Specifies whether the rule should apply only to TCP packets that contain the
	synchronous (SYN) flag, only to those that contain the non-synchronous
	(NOT-SYN) flag, or to all TCP packets (All). This field will be dimmed (unavailable
	for entry) unless you selected TCP as the Protocol.
ICMP Type	Specifies whether the value in the type field in ICMP packet headers will be used
	as a criteria. The code value can be any decimal value from 0 to 255. You can
	specify that the value must equal (eq) or not equal (neq) the specified value, or
	you can select any to enable the rule to be invoked on all ICMP packets. This field
	will be dimmed (unavailable for entry) unless you specify ICMP as the Protocol.
ICMP Code	Specifies whether the value in the code field in ICMP packet headers will be used
	as a criteria. The code value can be any decimal value from 0 to 255. You can
	specify that the value must equal (eq) or not equal (neq) the specified value, or
	you can select any to enable the rule to be invoked on all ICMP packets. This field
	will be dimmed (unavailable for entry) unless you specify ICMP as the Protocol.
IP Frag Pkt	Determines how the rule applies to IP packets that contain fragments. You can
	choose from the following options:
	Yes: The rule will be applied only to packets that contain fragments.
	No: The rule will be applied only to packets that do not contain fragments.
	Ignore: (Default) The rule will be applied to packets whether or not they contain
	fragments, assuming that they match the other criteria.
IP Option Pkt	Determines whether the rule should apply to IP packets that have options
	specified in their packet headers.
	Yes: The rule will be applied only to packets that contain header options.
	No: The rule will be applied only to packets that do not contain header options.
	Ignore: (Default) The rule will be applied to packets whether or not they contain
	header options, assuming that they match the other criteria.
Packet Size	Specifies that the IP Filter rule will take affect only on packets whose size in bytes
	matches this criteria. (lt = less than, gt = greater than, lteq = less than or equal
	to, etc.)
TOD Rule Status	The Time of Day Rule Status determines how the Start Time/End Time settings
	are used.
	Enable: (Default) The rule is in effect for the specified time period.
	Disable: The rule is not in effect for the specified time period, but is effective at
	all other times.

3.When you are done selecting criteria, ensure that Enable is selected and then click [Apply].

If the security level of the rule matches the globally configured setting, a green ball in the Oper. Status column for that rule, indicating that the rule is now in effect. A red ball will display when the rule is disabled or if its security level is different than the globally configured level.

4.Ensure that the Security Level and Private/Public/DMZ Default Action settings on the IP Filter Configuration page are configured as needed, then click [Apply].

A page gives a receipt for the changes.

5.Select Admin > Commit & Reboot and click [Save] to save your changes to permanent storage.

Rev:01_040220 61