| Overview | Package | Class | Deprecated | Help |
| Properties | |
|---|---|
| destinationIpAddress |
type=string default= Displayed(tab/group)=Destination IP (Filter Properties/Match Criteria) |
| destinationIpAddressFullMask |
Specifies bitmasking functionality to allow an operator to configure a destination IP address
match based on arbitrary bits set in the IP address. You cannot configure the Dst Net Mask if
you configure the Dst Mask parameter.
type=string access=read-only default= Displayed(tab/group)=Dst Net Mask (Filter Properties/Match Criteria) |
| destinationIpAddressMask |
type=int access=read-only default=0 Displayed(tab/group)=Dst Mask (Filter Properties/Match Criteria) |
| destinationOperator |
Specifies match criteria for TCP or UDP packets. Select the check box to enable the parameter,
choose an option, and configure Dest Port From and Dest Port To values according to the selected option.
type=acl.Operator access=read-only default=NONE Displayed(tab/group)=Dest Port (Filter Properties/Port Properties) |
| destinationPort1 |
type=int access=read-only default=0 minimum=0 maximum=65535 Displayed(tab/group)=Dest Port From (Filter Properties/Port Properties) |
| destinationPort2 |
type=int access=read-only default=0 minimum=0 maximum=65535 Displayed(tab/group)=Dest Port To (Filter Properties/Port Properties) |
| dscp |
type=qos.DscpEnum access=read-only default=default Displayed(tab/group)=DSCP (Filter Properties/Match Criteria) |
| dscpMask |
type=qos.DscpEnum access=read-only default=be |
| egressHitByteCount |
type=string access=read-only default=0 Displayed(tab/group)=Bytes (Statistics/Egress Match Hit Counts) |
| egressHitCount |
type=string access=read-only default=0 Displayed(tab/group)=Packets (Statistics/Egress Match Hit Counts) |
| fragment |
Specifies whether fragmented or non-fragmented packets are used as a packet match criterion. When
the off option is selected, no match criterion is specified. When the true option is selected, the
parameter specifies a match on all fragmented IP packets. A match occurs for each packet that has
a non-zero value in the MF bit or the Fragment Offset field of the IP header. When the false option
is selected, the parameter specifies a match on all non-fragmented IP packets. Non-fragmented IP
packets have the MF bit and the Fragment Offset field set to zero.
type=acl.ItemMatch access=read-only default=off Displayed(tab/group)=Fragment (Filter Properties/Match Criteria) |
| icmpCode |
type=int access=read-only default=-1 minimum=-1 maximum=255 Displayed(tab/group)=ICMP Code (Filter Properties/ICMP Properties) |
| icmpType |
type=int access=read-only default=-1 minimum=-1 maximum=255 Displayed(tab/group)=ICMP Type (Filter Properties/ICMP Properties) |
| ingressHitByteCount |
type=string access=read-only default=0 Displayed(tab/group)=Bytes (Statistics/Ingress Match Hit Counts) |
| ingressHitCount |
type=string access=read-only default=0 Displayed(tab/group)=Packets (Statistics/Ingress Match Hit Counts) |
| ipOptionMask |
Specifies the IP option mask value to use as a match criterion for the IP Option parameter specified.
The parameter is configurable when the IP Option parameter is configured.
type=int access=read-only default=0 minimum=0 maximum=255 Displayed(tab/group)=IP Opt Mask (Filter Properties/Match Criteria) |
| ipOptionValue |
Specifies the optional header field to be included in a packet as match criterion for the filter.
type=acl.IpOptions access=read-only default=EOOL Displayed(tab/group)=IP Option (Filter Properties/Match Criteria) |
| multipleOption |
Specifies whether to perform a match for a packet that contains more than one optional header field.
This parameter is configurable when the Option Present parameter is enabled. When set to off, filtering
for this parameter is disabled. When the false option is selected, there is no match when a packet contains
more than one optional header field. When the true option is selected, there is a match when a packet contains
more than one optional header field.
type=acl.ItemMatch access=read-only default=off Displayed(tab/group)=Multiple Option (Filter Properties/Match Criteria) |
| optionPresent |
Specifies whether to perform a match for a packet that contains an optional header field.
Select the check box to configure the parameter. When set to off, filtering for this
parameter is disabled. When the false option is selected, there is no match when a packet
contains an optional header field. When the true option is selected, there is a match when
a packet contains an optional header field.
type=acl.ItemMatch access=read-only default=off Displayed(tab/group)=Option Present (Filter Properties/Match Criteria) |
| protocol |
type=acl.Protocol access=read-only default=ALL minimum=-1 maximum=255 Displayed(tab/group)=Protocol (Filter Properties/Protocol) |
| redirectURL |
type=string access=read-only default= Displayed(tab/group)=Redirect URL (Web Redirect/Redirect URL) |
| sourceIpAddress |
type=string access=read-only default= Displayed(tab/group)=Source IP (Filter Properties/Match Criteria) |
| sourceIpAddressFullMask |
type=string access=read-only default= Displayed(tab/group)=Src Net Mask (Filter Properties/Match Criteria) |
| sourceIpAddressMask |
type=int access=read-only default=0 Displayed(tab/group)=Src Mask (Filter Properties/Match Criteria) |
| sourceOperator |
Specifies match criteria for TCP or UDP packets. Select the check box to enable the parameter,
choose an option, and configure Src Port From and Src Port To values according to the option selected.
type=acl.Operator access=read-only default=NONE Displayed(tab/group)=Source Port (Filter Properties/Port Properties) |
| sourcePort1 |
type=int access=read-only default=0 minimum=0 maximum=65535 Displayed(tab/group)=Src Port From (Filter Properties/Port Properties) |
| sourcePort2 |
type=int access=read-only default=0 minimum=0 maximum=65535 Displayed(tab/group)=Src Port To (Filter Properties/Port Properties) |
| tcpAck |
For TCP packets, specifies filter matching based on the ACK bit. Select the check box to
activate the parameter. When the parameter is set to true, a match occurs when the ACK bit
is set (1). When the parameter is set to false, a match occurs when the ACK bit is not set (0).
When the parameter is set to off, matching based on the ACK bit is disabled.
type=acl.ItemMatch access=read-only default=off Displayed(tab/group)=TCP Ack (Filter Properties/TCP Properties) |
| tcpSyn |
For TCP packets, specifies filter matching based on the SYN bit. Select the check box to
activate the parameter. When the parameter is set to true, a match occurs when the SYN bit is
set (1). When the parameter is set to false, a match occurs when the SYN bit is not set (0).
When the parameter is set to off, matching based on the SYN bit is disabled.
type=acl.ItemMatch access=read-only default=off Displayed(tab/group)=TCP Syn (Filter Properties/TCP Properties) |
| Properties inherited from aclfilter.EntryDefinition |
|---|
| action, administrativeState, application, displayedName, filterEntryType, id, logId, secondaryAction, timeRangePointer |
| Properties inherited from policy.PolicyItemDefinition |
|---|
| containingPolicyDisplayedName, containingPolicyId |
| Properties inherited from policy.PolicyObject |
|---|
| description, displayedName, globalPolicy, id, isLocal, policyType, siteId, siteName, templateObject |
| Properties inherited from ManagedObject |
|---|
| actionMask, children-Set, deploymentState, isFaultSquelched, name, objectFullName, selfAlarmed |
| Methods inherited from aclfilter.EntryDefinition |
|---|
| find, renum |