Netgear FS728TLP Web Management User Guide - Page 215

ProSAFE FS526Tv2, FS726Tv2, and FS728TLP Smart Switches Settings Dst IP Mask Description Specify the destination IP mask that is associated with the destination IP address. The IP mask specifies which bits in the destination IP address need to be compared against the address information in a packet. This field is required when you configure a destination IP address. Dst L4 Port Service Type Note: A subnet mask of 255.255.255.255 indicates that none of the bits are important. A subnet mask of 0.0.0.0 indicates that all of the bits are important. For example, if you apply destination IP mask 0.0.0.255 to IP address 192.168.0.10, the ACL applies to IP addresses 192.168.0.0 through 192.168.0.255. Specify the TCP or UDP destination port that needs to be compared against the information in a packet: Other, domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, or www. Each of these selections is translated into the associated port number, which is used as both the start port and end port of the port range. If you select Other, enter a port number in the range from 0 to 65535 in the field next to the menu. Specify the service type match conditions for the extended IP ACL rule. The possible values are IP DSCP, IP precedence, and IP ToS, which are alternative ways of specifying a match criterion for the same service type field in the IP header. Each service type uses a different user notation. Select one of the following radio buttons, and specify the value that is associated with the service type: • IP DSCP. Specifies the IP DiffServ Code Point (DSCP) field, which is defined as the high-order 6 bits of the service type octet in the IP header. Select an IP DSCP value from the menu. To specify a numeric value in the field next to the menu, select other from the menu, and enter an integer in the range from 0 to 63 in the field. • IP Precedence. Specifies the IP precedence field, which is defined as the high-order 6 bits of the service type octet in the IP header. In the field next to the radio button, enter an integer in the range from 0 to 7. • IP TOS. Specifies the Type of Service (ToS) bits, which is defined as all 8 bits of the service type octet in the IP header. In the first field next to the radio button, enter the 2-digit hexadecimal ToS bits number in the range from 00 to FF. In the second and rightmost field, enter the 2-digit hexadecimal ToS mask number, also in the range from 00 to FF. The ToS mask number specifies the bit positions that are used for comparison against the IP ToS field in a packet. For example, to check for an IP ToS value that has both bit 7 (the most significant bit) and bit 5 set and that has bit 1 clear, enter 0xA0 as the ToS bits number, and enter 0xFF as the ToS mask number. 5. Click the Apply button. The settings are saved, and the IP rule is added to the Extended ACL Rule Table on the IP Extended Rules screen. Manage Access Control Lists 215