Home | Trees | Indices | Help |
|
---|
|
L3 Access Control Element (ACE) Class.
It defines a set of attributes for matching a packet. One or more ACEs may be added to an Access Control List (ACL).
Instance Methods | |||
|
|||
|
|||
|
|||
|
|||
(int ,int )
|
|
||
|
|||
(int ,int )
|
|
||
|
|||
|
|||
|
|||
str
|
|
||
Inherited from |
Class Variables | |
AceFlag = enum(IP_ACE_PREC_PRESENT= 0x0001, IP_ACE_TOS_PRESENT
|
|
Enum |
PortOperator = enum('ONEP_OPER_ANY', 'ONEP_OPER_LT', 'ONEP_OPE Enumeration of L3 Ace Port Operator. |
Enum |
TcpFlags = enum(ONEP_TCP_FIN= 1, ONEP_TCP_SYN= 2, ONEP_TCP_RST Enumeration of TCP Flags. |
Enum |
TcpFlagMatch = enum(ONEP_MATCH_ANY= 1, ONEP_MATCH_ALL= 2) Enumeration of TCP Flag match. |
Enum |
log_flag = enum(ONEP_ACL_LOG_UNUSED= 0, ONEP_ACL_LOG_NORMAL= 1 Enumeration of Ace Log Flags. |
permit = property(_get_permit, _set_permit, None, _doc)
|
|
src_prefix = property(_get_src_prefix, _set_src_prefix, None,
|
|
src_prefix_len = property(_get_src_prefix_len, _set_src_prefix
|
|
dst_prefix = property(_get_dst_prefix, _set_dst_prefix, None,
|
|
dst_prefix_len = property(_get_dst_prefix_len, _set_dst_prefix
|
|
protocol = property(_get_protocol, _set_protocol, None, _doc)
|
|
src_port_oper = property(_get_src_port_oper, _set_src_port_ope
|
|
src_port1 = property(_get_src_port1, _set_src_port1, None, _doc)
|
|
dst_port_oper = property(_get_dst_port_oper, _set_dst_port_ope
|
|
dst_port1 = property(_get_dst_port1, _set_dst_port1, None, _doc)
|
Properties | |
Inherited from |
Method Details |
Instantiate a new Access Control Element. It initialises L3 Access Control Element(ACE) properties as follows: src_port_oper: PortOperator.ONEP_OPER_ANY dst_port_oper: PortOperator.ONEP_OPER_ANY protocol: 256 ttl: 0
|
Set source prefix to any. It sets following two properties: src_prefix: "0.0.0.0" src_prefix_len: 0 |
Set destination prefix to any. It sets following two properties: dst_prefix: "0.0.0.0" dst_prefix_len: 0 |
Set TCP/UDP source port range.
|
Get TCP/UDP source port lower,upper bound.
|
Set TCP/UDP destination port range.
|
Get TCP/UDP destination port lower,upper bound.
|
Set TCP flags. A match bit field value, mask and a match type are used to set up the matching of TCP flags. The mask field selects which flags are to be used in the match. The match type determines the combination of selected TCP flags that will cause a match, i.e., either all TCP flags must match the selected flag values, or any one of the TCP flags must match the selected flag values. For example to match on all TCP flag bits being FIN = 1, SYN = 1, PSH = 0, ACK = 0 : value = [TcpFlags.ONEP_TCP_FIN, TcpFlags.ONEP_TCP_SYN] mask = [TcpFlags.ONEP_TCP_FIN, TcpFlags.ONEP_TCP_SYN, TcpFlags.ONEP_TCP_PSH, TcpFlags.ONEP_TCP_ACK] match = [TcpFlagMatch.ONEP_MATCH_ALL] Note: PSH and ACK are not passed in 'value' as all tcp flags have 0 bit value by default.
|
Set the value of the DSCP field.
|
Set Log Flag. Set the value of the Log flags.
|
Returns a string representation of the L2 Access Control Element(ACE) instance.
|
Class Variable Details |
AceFlag
|
PortOperatorEnumeration of L3 Ace Port Operator. ONEP_OPER_ANY ONEP_OPER_LT ONEP_OPER_GT ONEP_OPER_EQ ONEP_OPER_NEQ ONEP_OPER_RANGE ONEP_OPER_ONEBYTE ONEP_OPER_TWOBYTE
|
TcpFlagsEnumeration of TCP Flags. ONEP_TCP_FIN: Finish ONEP_TCP_SYN: Sync ONEP_TCP_RST: Reset ONEP_TCP_PSH: Push ONEP_TCP_ACK: Acknowledgement ONEP_TCP_URG: Urgent
|
TcpFlagMatchEnumeration of TCP Flag match. ONEP_MATCH_ANY: All TCP flags must match the selected flag values. ONEP_MATCH_ALL: Any one of the TCP flags must match the selected flag values.
|
log_flagEnumeration of Ace Log Flags. ONEP_ACL_LOG_UNUSED ONEP_ACL_LOG_NORMAL ONEP_ACL_LOG_INPUT
|
src_prefix
|
src_prefix_len
|
dst_prefix
|
dst_prefix_len
|
src_port_oper
|
dst_port_oper
|
Home | Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Mon Aug 18 09:17:30 2014 | http://epydoc.sourceforge.net |