User Manual

24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports
Manage Device Security User Manual431
The wildcard mask determines which bits are used and which bits are ignored. A
wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard of
255.255.255.255 indicates that all of the bits are important.
• Dst L4. The options are available only when the protocol is set to
TCP or UDP. Use the
destination L4 port option to specify relevant matching conditions for L4 port numbers
in the extended ACL rule.
You can select either the Port radio button or the Range radio button:
- If you select the Port radio button, you can either enter the port number yourself
or select one of the following protocols from the menu.
• The destination IP
TCP port protocols are domain, echo, ftp, ftpdata,
www-http, smtp, telnet, pop2, pop3, and bgp.
• The destination IP UDP port protocols are domain, echo, snmp, ntp, rip,
time, who, and tftp.
Each of these values translates into its equivalent port number, which is used as
both the start and end of the port range.
Select Other from the menu to enter a port number
. If you select Other from the
menu but leave the field blank, it means any.
The relevant matching conditions for L4 port numbers equal. That is, the IP ACL
rule matches only if the Layer 4 destination port number is equal to the specified
port number or port protocol.
- If you select the Range radio button, the IP
ACL rule matches only if the Layer 4
destination port number is within the specified port range. The starting port,
ending port, and all ports in between are a part of the Layer 4 port range.
The Start Port and End Port fields identify the first and last ports that are part of
the port range.
They values can range from 0 to 65535.
You can either select the enter the port range yourself or select one of the
following protocols from the menu:
• The destination IP TCP port range names are domain, echo, ftp, ftpdata,
www-http, smtp, telnet, pop2, pop3, and bgp.
• The destination IP UDP port range names are domain, echo, snmp, ntp, rip,
time, who, and tftp.
Each of these values translates into its equivalent port number, which is used as
both the start and end of the port range.
Select Other from the menu to enter a port number
. If you select Other from the
menu but leave the field blank, it means any.
The wildcard mask determines which bits are used and which bits are ignored. A
wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard
of 255.255.255.255 indicates that all of the bits are important.