Siemens E-110-I - Manual (Page 67)

Chapter 4: Advanced Configuration
Field Description
Dest Port Port number criteria for the destination computer(s) (i.e., the port number of the
type of computer to which the packet is being sent).
This field will be dimmed (unavailable for entry) unless you have selected TCP or
UDP as the protocol.
See the description of Src IP Address for the selection options.
TCP Flag Specifies whether the rule should apply only to TCP packets that contain the
synchronous (SYN) flag, only to those that contain the non-synchronous
(NOT-SYN) flag, or to all TCP packets (All). This field will be dimmed (unavailable
for entry) unless you selected TCP as the Protocol.
ICMP Type Specifies whether the value in the type field in ICMP packet headers will be used
as a criteria. The code value can be any decimal value from 0 to 255. You can
specify that the value must equal (eq) or not equal (neq) the specified value, or
you can select any to enable the rule to be invoked on all ICMP packets. This field
will be dimmed (unavailable for entry) unless you specify ICMP as the Protocol.
ICMP Code Specifies whether the value in the code field in ICMP packet headers will be used
as a criteria. The code value can be any decimal value from 0 to 255. You can
specify that the value must equal (eq) or not equal (neq) the specified value, or
you can select any to enable the rule to be invoked on all ICMP packets. This field
will be dimmed (unavailable for entry) unless you specify ICMP as the Protocol.
IP Frag Pkt Determines how the rule applies to IP packets that contain fragments. You can
choose from the following options:
Yes: The rule will be applied only to packets that contain fragments.
No: The rule will be applied only to packets that do not contain fragments.
Ignore: (Default) The rule will be applied to packets whether or not they contain
fragments, assuming that they match the other criteria.
IP Option Pkt Determines whether the rule should apply to IP packets that have options
specified in their packet headers.
Yes: The rule will be applied only to packets that contain header options.
No: The rule will be applied only to packets that do not contain header options.
Ignore: (Default) The rule will be applied to packets whether or not they contain
header options, assuming that they match the other criteria.
Packet Size Specifies that the IP Filter rule will take affect only on packets whose size in bytes
matches this criteria. (lt = less than, gt = greater than, lteq = less than or equal
to, etc.)
TOD Rule Status The Time of Day Rule Status determines how the Start Time/End Time settings
are used.
Enable: (Default) The rule is in effect for the specified time period.
Disable: The rule is not in effect for the specified time period, but is effective at
all other times.
3. When you are done selecting criteria, ensure that Enable is selected and then click [Apply].
If the security level of the rule matches the globally configured setting, a green ball in the Oper.
Status column for that rule, indicating that the rule is now in effect. A red ball will display when the
rule is disabled or if its security level is different than the globally configured level.
4. Ensure that the Security Level and Private/Public/DMZ Default Action settings on the IP Filter
Configuration page are configured as needed, then click [Apply].
A page gives a receipt for the changes.
5. Select Admin > Commit & Reboot and click [Save] to save your changes to permanent storage.
Rev:01_040220 61