PDF user manual for CopperEdge 150

)LOWHU&ULWHULDEach IP filter includes the five filtering criteria listed below. Inorder for a packet to be considered as matching the filter, itmust match all five of the categories. This means that all fiveitems must be configured, even if the specification is don’t care.For don’t care fields, set the field to a value that will be true forevery packet; for example, if you do not care about the SourceAddress, you can simply specify the source IP address andsource subnet mask values as zero. Here are the five categoriesof filter criteria:1. Source address and source mask.Match if (SA & mask) = value2. Destination address and destination mask.Match if (DA & mask) = value3. IP Protocol Identifier of the filter. The ID is entered asan integer which translates to the type of protocol asshown in the table below. A match occurs if:Filter Protocol ID = Protocol ID of the packet, orFilter Protocol ID = 0 (any).Valid IP Protocol IDs are shown in the following table:Valid IP Protocol IDsID Name Description0 IP Pseudo protocol number; matches anyInternet protocol1 ICMP Internet control message protocol2 IGMP Internet group multicast protocol3 GGP Gateway-gateway protocol6 TCP Transmission control protocol17 UDP User datagram protocol4. Source port comparison.For TCP and UDP packets only, compares the sourceTCP/UDP port with the port specified by the filter. Thecomparison standard can be set to detect a match ifthe value of the packet’s source port is:ANY anythingLT less than the filter portGT greater than the filter portEQ equal to the filter portNE not equal to the filter port.&RSSHU(GJH,QVWDOODWLRQDQG2SHUDWLQJ*XLGH