User Manual

Command Reference Security Commands
12-172
offset
Defines where in the data packet to apply the mask. May be a decimal value
from 0 to 1500, where 0 indicates the first data position in the data packet.
mask
A hexadecimal or decimal number. The mask is applied to the data using the
operator and the result is compared with the value. In the case of TOS, the
operator EQ is implied.
operator
(EQ, GE, GT, LE, LT, NE)
The available operators are: equal to (EQ), greater than or equal to (GE),
greater than (GT), less than or equal to (LE), less than (LT), and not equal to
(NE).
value
A hexadecimal or decimal number.
DST
Allows or denies passage of data packets destined for a specific node on the
local area network. Must be used in conjunction with the ipMask and address
parameters.
SRC
Allows or denies passage of data packets that originated from a specific node
on the local area network. Must be used in conjunction with the ipMask and
address parameters
ipmask
An IP address in standard numeric format (for example, 193.0.1.255).
address
An IP address in standard numeric format (for example, 193.0.1.50).
TOS
Builds a rule using the IP Type of Service field. Must be used in conjunction
with the mask and value parameters. For TOS, the operator EQ is implied.
protocolNum
Allows or denies packets of the protocol specified by an IP protocol identifier
number between 0 and 65535.
ICMP
Allows or denies Internet Control Message Protocol packets.
TCP
Allows or denies TCP-based packets which match criteria specified by the
subsequent parameters. Applications that use TCP include Telnet, FTP, and
SMTP (Simple Mail Transfer Protocol).