void __4_4_18_1__Processing_Entry_Description() { /** * @group: 4.4.18.1 Processing Entry Description * * @description: The Processing Entry consists of two parameters as described in Table 4-16. * * * * TABLE 4-16: ACL PROCESSING ENTRY PARAMETERS * +------------------+----------------------------------------------------------+ * | Parameter | Description | * +------------------+----------------------------------------------------------+ * | FRN[3:0] | First Rule Number | * | | Pointer to an Action rule entry. Possible values are 0 | * | | to 15. If all Matching rules specified in the RuleSet | * | | are evaluated true, then this is the resulting Action | * | | rule. | * +------------------+----------------------------------------------------------+ * | RuleSet[15:0] | Specifies a set of one or more Matching rule entries. | * | | RuleSet has one bit for each of the 16 Matching rule | * | | entries. If multiple Matching rules are selected, then | * | | all conditions will be AND'ed to produce a final match | * | | result. | * | | | * | | 0 = Matching rule not selected | * | | 1 = Matching rule selected | * +------------------+----------------------------------------------------------+ * * * * FIGURE 4-7: ACL STRUCTURE AND EXAMPLE RULE VALUES * +-----------+ +-----+ +----------+ +-------------+ * | Action | OR | FRN | | RuleSet | | Matching | * | Rule |<--->(| ↓ |<-| (Values) | | Rule | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #0 | | 0 | | #0: none | | Entry #0 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #1 |<-- | 0 | | #1: 1 | | Entry #1 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #2 |<-- | 1 | | #2: 2 | | Entry #2 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #3 | |none | | #3: none | | Entry #3 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #4 |<-- | 4 | | #4: 4,5,6| | Entry #4 <--| * +-----------+ +-----+ +----------+ +-------------+ * | Entry #5 | |none | | #5: none | | Entry #5 <--| AND * +-----------+ +-----+ +----------+ +-------------+ * | Entry #6 |<-- | 5 | | #6: none | | Entry #6 <--| * +-----------+ +-----+ +----------+ +-------------+ * | Entry #7 | |none | | #7: none | | Entry #7 <--| * +-----------+ +-----+ +----------+ +-------------+ * | Entry #8 | | 9 | | #8: 7,11 | | Entry #8 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #9 |<-- |none | | #9: none | | Entry #9 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #10 | |none | | #10: none| | Entry #10 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #11 | |none | | #11: none| | Entry #11 <--| * +-----------+ +-----+ +----------+ +-------------+ * | Entry #12 | |none | | #12: none| | Entry #12 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #13 | |none | | #13: none| | Entry #13 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #14 | |none | | #14: none| | Entry #14 | * +-----------+ +-----+ +----------+ +-------------+ * | Entry #15 | |none | | #15: none| | Entry #15 | * +-----------+ +-----+ +----------+ +-------------+ * * Action Field (associated with Matching Rule Entry #3) * Description: When counter function is enabled in Matching Rule. * * The examples in Figure 4-7 are interpreted as follows: * • Rule #0: Test the matching rule entry #0. If true, apply action rule entry #0. * • Rule #1: Test the matching rule entry #1. If true, apply action rule entry #0. * • Rule #2: Test the matching rule entry #2. If true, apply action rule entry #1. * • Matching rule entry #3 is configured for the counter function. Action entry #3 is used to hold the corresponding * count value. * • Rule #4: Test the matching rule entries #4, 5 and 6. If all are true, apply action rule entry #4. * • Rule #6: Test the matching rule entry #6. If true, apply action rule entry #5. * • Rule #8: Test the matching rule entries #7 and 11. If both are true, apply action rule entry #9. * No more than one action can be taken for any packet. If the matching conditions are true for multiple RuleSets, then the * corresponding FRN field with the lowest value (highest priority) determines the action to be taken. * Note that processing entries #0 and 1 produce an OR function: action #0 is taken if RuleSet #0 or RuleSet #1 is true. * Notice that processing entries #4 and 6 have overlapping RuleSets, but different FRNs. This can be summarized as: * If match #4, 5 and 6 are all true, then apply action #4, * Else if match #6 is true, then apply action #5. * Table 4-17 summarizes the available matching options. The MD and ENB fields are used to select the desired matching * option. More configuration details are given in the following section. * * TABLE 4-17: MATCHING RULE OPTIONS * * | MD[1:0] | ENB[1:0] | Matching Rule | * +----------+----------+-----------------------------------------------------------------+ * | 00 | XX | Matching rule disabled | * +----------+----------+-----------------------------------------------------------------+ * | 01 | | (Layer 2 matching: MAC address, EtherType) | * | | 00 | Action field is used as count value for packets matching MAC | * | | | address and EtherType | * | +----------+-----------------------------------------------------------------+ * | | 01 | Compare EtherType only | * | +----------+-----------------------------------------------------------------+ * | | 10 | Compare MAC address only | * | +----------+-----------------------------------------------------------------+ * | | 11 | Compare both MAC address and EtherType | * +----------+----------+-----------------------------------------------------------------+ * | 10 | | (Layer 3 matching: IP address) | * | | 00 | Reserved | * | +----------+-----------------------------------------------------------------+ * | | 01 | Compare IPv4 source and destination address (with mask) | * | +----------+-----------------------------------------------------------------+ * | | 10 | Compare both source and destination IPv4 addresses (without mask)| * | +----------+-----------------------------------------------------------------+ * | | 11 | Reserved | * +----------+----------+-----------------------------------------------------------------+ * | 11 | | (Layer 4 matching: TCP, UDP, IP protocol) | * | | 00 | Compare IPv4 protocol | * | +----------+-----------------------------------------------------------------+ * | | 01 | Compare TCP source port or destination port | * | +----------+-----------------------------------------------------------------+ * | | 10 | Compare UDP source port or destination port | * | +----------+-----------------------------------------------------------------+ * | | 11 | Compare TCP sequence number | * +----------+----------+-----------------------------------------------------------------+ * */ }