Explanation of MikroTik Layer 2 Firewall Pattern Matchers

This entry was posted in Firewall MikroTik VLANs on October 16, 2018 by rickfrey1000

---

 

 

 

Ethernet Frame

MAC Addresses

Logical Link Control (802.2)

ARP Wikipedia Page

 

EtherType Table

EtherType	Protocol
0x0004	802.2 Frames
0x0800	Internet Protocol version 4 (IPv4)
0x0806	Address Resolution Protocol (ARP)
0x0842	Wake-on-LAN
0x22F3	IETF TRILL Protocol
0x22EA	Stream Reservation Protocol
0x6003	DECnet Phase IV
0x8035	Reverse Address Resolution Protocol
0x809B	AppleTalk (Ethertalk)
0x80F3	AppleTalk Address Resolution Protocol (AARP)
0x8100	VLAN-tagged frame (IEEE 802.1Q) and Shortest Path Bridging
0x8137	IPX
0x8204	QNX Qnet
0x86DD	Internet Protocol Version 6 (IPv6)
0x8808	Ethernet flow control
0x8809	Ethernet Slow Protocols such as the Link Aggregation Control Protocol
0x8819	CobraNet
0x8847	MPLS unicast
0x8848	MPLS multicast
0x8863	PPPoE Discovery Stage
0x8864	PPPoE Session Stage
0x886D	Intel Advanced Networking Services [12]
0x8870	Jumbo Frames (Obsoleted draft-ietf-isis-ext-eth-01)
0x887B	HomePlug 1.0 MME
0x888E	EAP over LAN (IEEE 802.1X)
0x8892	PROFINET Protocol
0x889A	HyperSCSI (SCSI over Ethernet)
0x88A2	ATA over Ethernet
0x88A4	EtherCAT Protocol
0x88A8	Provider Bridging (IEEE 802.1ad) & Shortest Path Bridging IEEE 802.1aq
0x88AB	Ethernet Powerlink
0x88B8	GOOSE (Generic Object Oriented Substation event)
0x88B9	GSE (Generic Substation Events) Management Services
0x88BA	SV (Sampled Value Transmission)
0x88CC	Link Layer Discovery Protocol (LLDP)
0x88CD	SERCOS III
0x88DC	WSMP, WAVE Short Message Protocol
0x88E1	HomePlug AV MME
0x88E3	Media Redundancy Protocol (IEC62439-2)
0x88E5	MAC security (IEEE 802.1AE)
0x88E7	Provider Backbone Bridges (PBB) (IEEE 802.1ah)
0x88F7	Precision Time Protocol (PTP) over Ethernet (IEEE 1588)
0x88F8	NC-SI
0x88FB	Parallel Redundancy Protocol (PRP)
0x8902	IEEE 802.1ag Connectivity Fault Management (CFM) Protocol / ITU-T Recommendation Y.1731 (OAM)
0x8906	Fibre Channel over Ethernet (FCoE)
0x8914	FCoE Initialization Protocol
0x8915	RDMA over Converged Ethernet (RoCE)
0x891D	TTEthernet Protocol Control Frame (TTE)
0x892F	High-availability Seamless Redundancy (HSR)
0x9000	Ethernet Configuration Testing Protocol
0x9100	VLAN-tagged (IEEE 802.1Q) frame with double tagging

 

SAP Codes

Hex	Meaning
0x00	Null LSAP
0x02	Individual LLC Sublayer Mgt
0x03	Group LLC Sublayer Management Function
0x04	SNA Path Control (individual)
0x05	IBM SNA Path Control (group)
0x06	Reserved for DoD IP
0x08	SNA
0x0E	ProWay-LAN
0x18	Texas Instruments
0x42	IEEE 802.1 Bridge Spanning Tree Protocol
0x4E	EIA-RS 511
0x5E	ISI IP
0x7E	ISO 8208 (X.25 over IEEE 802.2 Type LLC)
0x80	Xerox Network Systems (XNS)
0x82	BACnet/Ethernet
0x86	Nestar
0x8E	ProWay-LAN (IEC 955)
0x98	ARPANET Address Resolution Protocol (ARP)
0xA6	RDE (route determination entity)
0xAA	SNAP Extension Used
0xBC	Banyan Vines
0xE0	Novell NetWare
0xF0	IBM NetBIOS
0xF4	IBM LAN Management (individual)
0xF8	IBM Remote Program Load (RPL)
0xFA	Ungermann-Bass
0xFE	OSI protocols ISO CLNS IS 8473

 

ARP Operation Codes

Number	Operation Code (op)	References
0	Reserved	[RFC5494]
1	REQUEST	[RFC826][RFC5227]
2	REPLY	[RFC826][RFC5227]
3	request Reverse	[RFC903]
4	reply Reverse	[RFC903]
5	DRARP-Request	[RFC1931]
6	DRARP-Reply	[RFC1931]
7	DRARP-Error	[RFC1931]
8	InARP-Request	[RFC2390]
9	InARP-Reply	[RFC2390]
10	ARP-NAK	[RFC1577]
11	MARS-Request	[Grenville_Armitage]
12	MARS-Multi	[Grenville_Armitage]
13	MARS-MServ	[Grenville_Armitage]
14	MARS-Join	[Grenville_Armitage]
15	MARS-Leave	[Grenville_Armitage]
16	MARS-NAK	[Grenville_Armitage]
17	MARS-Unserv	[Grenville_Armitage]
18	MARS-SJoin	[Grenville_Armitage]
19	MARS-SLeave	[Grenville_Armitage]
20	MARS-Grouplist-Request	[Grenville_Armitage]
21	MARS-Grouplist-Reply	[Grenville_Armitage]
22	MARS-Redirect-Map	[Grenville_Armitage]
23	MAPOS-UNARP	[Mitsuru_Maruyama][RFC2176]
24	OP_EXP1	[RFC5494]
25	OP_EXP2	[RFC5494]
26-65534	Unassigned
65535	Reserved	[RFC5494]

 

ARP Hardware Codes

0	Reserved
1	Ethernet
2	Experimental Ethernet
3	Amateur Radio AX.25
4	Proteon ProNET Token Ring
5	Chaos
6	IEEE 802 Networks
7	ARCNET
8	Hyperchannel
9	Lanstar
10	Autonet Short Address
11	LocalTalk
12	LocalNet (IBM PCNet or SYTEK LocalNET)
13	Ultra link
14	SMDS
15	Frame Relay
16	Asynchronous Transmission Mode (ATM)
17	HDLC
18	Fibre Channel
19	Asynchronous Transmission Mode (ATM)
20	Serial Line
21	Asynchronous Transmission Mode (ATM)
22	MIL-STD-188-220
23	Metricom
24	IEEE 1394.1995
25	MAPOS
26	Twinaxial
27	EUI-64
28	HIPARP
29	IP and ARP over ISO 7816-3
30	ARPSec
31	IPsec tunnel
32	InfiniBand (TM)
33	TIA-102 Project 25 Common Air Interface (CAI)
34	Wiegand Interface
35	Pure IP
36	HW_EXP1
37	HFI
38-255	Unassigned
256	HW_EXP2
257	AEthernet
258-65534	Unassigned
65535	Reserved

Share this:

• Click to email a link to a friend (Opens in new window)
• Click to share on Twitter (Opens in new window)
• Click to share on Facebook (Opens in new window)
• Click to share on LinkedIn (Opens in new window)
• Click to share on Reddit (Opens in new window)
• Click to share on Pinterest (Opens in new window)
• Click to share on Tumblr (Opens in new window)

Like this:

Like Loading...

Related

---

---