Multi-Stream Analysis
135
Destination IPv6
address match
Enables selection by destination IPv6 address in the current
filter. The value configured here is used to determine which
frames are allowed to pass through the filter and which ones
are blocked. The available configuration values for this field
are the same that for the Source IPv6 address match setting.
Destination IPv6
address
This is a 128-bit IPv6 address in the A:B:C:D:E:F:G:H format,
where A, B, C, D, E, F, G and H are hexadecimal numbers
between 0000 and ffff. Destination addresses matching
some or all bits of the address configured here will be
allowed to pass through the filter. Bits used for matching
packets to this filter are configured by means the Destination
IPv6 address mask field.
Destination IPv6
address mask
This is the mask for the destination IPv6 address filter selec-
tion rule. Before comparing the Destination IPv6 Address
Match field with the actual IPv6 addresses, bit wise AND
operations are carried out between the value configured here
and the source address so that only the values surviving the
AND are taken into account for matching addresses.
Next Header match Enables selection by the 8-bit IPv6 next header field in the
current filter. The value configured here is used to determine
which packets are allowed to pass through the filter and
which ones are blocked. The available configuration values
for this field are the same that for the Source IPv6 address
match setting.
Next Header Configures the protocol identifier to be filtered when Next
Header matching is enabled. The available configuration val-
ues are the following:
• Numeric: Use this control if the traffic to be matched is
different of UDP, TCP and ICMP and it has an specific
protocol identifier assigned by the IANA.
• UDP: Matches traffic with a User Datagram Protocol
(UDP) envelope. Traffic commonly transported over UDP
includes IP voice, IP video and DNS.
• TCP: Matches traffic carried over the Transfer Control
Protocol (TCP). Most data applications (web, file transfer,
e-mail...) ere normally based on TCP transport.
• ICMP: Matches Internet Control Message Protocol pack-
ets. IP operation and maintenance traffic like ping use
ICMP.
Table 6.5: IPv6 Selection
Field Description
To Next Page