<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:45:16" />
    <title>IP Filter Profiles </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=284;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1049875"> </a><h1 class="pTitle">



IP Filter Profiles

</h1>
<a name="wp1017196"> </a><p class="pBodyRelative">
</p><div>
<table border="2" cellpadding="2" id="wp1049749table1049747">
  <caption></caption>
  <tr bgcolor="#CCCCCC" align="left" valign="middle">    <th><a name="wp1049749"> </a><p class="pCellHeading">
Field 

</p>
</th>
    <th><a name="wp1049751"> </a><p class="pCellHeading">
Description 

</p>
</th>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049753"> </a><p class="pBody">
Action

</p>
</td>
    <td><a name="wp1049755"> </a><p class="pBody">
If it is set to deny, all frames matching this filter will be discarded and 
scanning of the remainder of the filter list will be aborted. If it is set to 
permit, all frames matching this filter will be allowed for further 
bridging or routing processing.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049757"> </a><p class="pBody">
Protocol

</p>
</td>
    <td><a name="wp1049759"> </a><p class="pBody">
This filter protocol value matches the Internet Protocol Number in the 
frames. These IP numbers are defined in the Network Working Group 
Request for Comments (RFC) documents. Setting this to &#39;-1&#39; will make 
the filtering match any IP number.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049761"> </a><p class="pBody">
Address

</p>
</td>
    <td><a name="wp1049763"> </a><p class="pBody">
The source IP address to be matched for this filter. A value of 0 causes 
all source address to match.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049765"> </a><p class="pBody">
Mask

</p>
</td>
    <td><a name="wp1049767"> </a><p class="pBody">
This is the wildcard mask for the SrcAddress bits that must match. 0 bits 
in the mask indicate the corresponding bits in the SrcAddress must 
match in order for the matching to be successful, and 1 bits are don&#39;t care 
bits in the matching. A value of 0 causes only IP frames of source 
address the same as SrcAddress to match.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049769"> </a><p class="pBody">
PortLow

</p>
</td>
    <td><a name="wp1049771"> </a><p class="pBody">
If Protocol is UDP or TCP, this is the inclusive lower bound of the 
transport-layer source port range that is to be matched, otherwise it is 
ignored during matching. This value must be equal to or less than the 
value specified for this entry in SrcPortHigh.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049773"> </a><p class="pBody">
PortHigh

</p>
</td>
    <td><a name="wp1049775"> </a><p class="pBody">
If Protocol is UDP or TCP, this is the inclusive upper bound of the 
transport-layer source port range that is to be matched, otherwise it is 
ignored during matching. This value must be equal to or greater than the 
value specified for this entry in SrcPortLow. If this value is &#39;0&#39;, the UDP 
or TCP port number is ignored during matching.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049777"> </a><p class="pBody">
Address

</p>
</td>
    <td><a name="wp1049779"> </a><p class="pBody">
The destination IP address to be matched for this filter. A value of 0 
causes all source address to match.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049781"> </a><p class="pBody">
Mask

</p>
</td>
    <td><a name="wp1049783"> </a><p class="pBody">
This is the wildcard mask for the DestAddress bits that must match. 0 
bits in the mask indicate the corresponding bits in the DestAddress must 
match in order for the matching to be successful, and 1 bits are don&#39;t care 
bits in the matching. A value of 0 causes only IP frames of source 
address the same as SrcAddress to match.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049785"> </a><p class="pBody">
PortLow

</p>
</td>
    <td><a name="wp1049787"> </a><p class="pBody">
If Protocol is UDP or TCP, this is the inclusive lower bound of the 
transport-layer destination port range that is to be matched, otherwise it 
is ignored during matching. This value must be equal to or less than the 
value specified for this entry in PortHigh.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049789"> </a><p class="pBody">
PortHigh

</p>
</td>
    <td><a name="wp1049791"> </a><p class="pBody">
If Protocol is UDP or TCP, this is the inclusive upper bound of the 
transport-layer destination port range that is to be matched, otherwise it 
is ignored during matching. This value must be equal to or greater than 
the value specified for this entry in DestPortLow. If this value is &#39;0&#39;, the 
UDP or TCP port number is ignored during matching.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049793"> </a><p class="pBody">
Precedence

</p>
</td>
    <td><a name="wp1049795"> </a><p class="pBody">
The IP traffic precedence parameters in each frame are used to guide the 
selection of the actual service parameters when transmitting a datagram 
through a particular network. Most network treats high precedence 
traffic as more important than other traffic. The IP Precedence value 
ranges from &#39;0&#39; to &#39;7&#39;, with &#39;7&#39; the highest precedence and &#39;0&#39; the lowest 
precedence. The value &#39;-1&#39; means to match frames of any IP precedence. 
In other words, the IP precedence parameter will not to checked if this 
value is &#39;-1&#39;. The precedence level are: 

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1049796"> </a><li class="pSmartList1">routine(0) - Routine traffic precedence
</li>
<a name="wp1049797"> </a><li class="pSmartList1">priority(1) - Priority traffic precedence 
</li>
<a name="wp1049798"> </a><li class="pSmartList1">immediate(2) - Immediate traffic precedence 
</li>
<a name="wp1049799"> </a><li class="pSmartList1">flash(3) - Flash traffic precedence
</li>
<a name="wp1049800"> </a><li class="pSmartList1">flashOverride(4) - Flash-override traffic precedence
</li>
<a name="wp1049801"> </a><li class="pSmartList1">critical(5) - Critical precedence 
</li>
<a name="wp1049802"> </a><li class="pSmartList1">internet(6) - Internetwork control traffic precedence 
</li>
<a name="wp1049803"> </a><li class="pSmartList1">network(7) - Network control traffic precedence. 
</li>
</ul></div>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049805"> </a><p class="pBody">
TOS

</p>
</td>
    <td><a name="wp1049807"> </a><p class="pBody">
The Type of Service (TOS) of the frame. The TOS values ranges from 
&#39;0&#39; to &#39;15&#39;. The value &#39;-1&#39; matches any TOS value.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049809"> </a><p class="pBody">
ICMPType

</p>
</td>
    <td><a name="wp1049811"> </a><p class="pBody">
This filter specifies the ICMP message type to be matched. Setting this 
value to &#39;-1&#39; will make the filtering match any ICMP message type.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049813"> </a><p class="pBody">
ICMPCode

</p>
</td>
    <td><a name="wp1049815"> </a><p class="pBody">
This filter specifies the ICMP message code to be matched. Setting this 
value to &#39;-1&#39; will make the filtering match any ICMP code.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049817"> </a><p class="pBody">
TCPEstablished

</p>
</td>
    <td><a name="wp1049819"> </a><p class="pBody">
This filter if true specifies that for TCP protocol, in an established 
connection, a match occurs if the TCP datagram has the 
ACK,FIN,PSH,RST,SYN or URG control bits set. If false, a match will 
occur for any TCP datagram.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1049821"> </a><p class="pBody">
LogEnabled

</p>
</td>
    <td><a name="wp1049823"> </a><p class="pBody">
Specifies whether filtered frames will be logged by the filtering 
subsystem or not. If true, then all frames will be logged. If false, then no 
frame will be logged.

</p>
</td>
</tr>
</table>
</div>
<p class="pBodyRelative">
</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
