Chapter 12
| Security Measures
Access Control Lists
– 302 –
Figure 195: Configuring a Standard IPv6 ACL
Configuring an
Extended IPv6 ACL
Use the Security > ACL (Configure ACL - Add Rule - IPv6 Extended) page to
configure an Extended IPv6 ACL.
Parameters
These parameters are displayed:
◆ Type – Selects the type of ACLs to show in the Name list.
◆ Name – Shows the names of ACLs matching the selected type.
◆ Action – An ACL can contain any combination of permit or deny rules.
◆ Source/Destination Address Type – Specifies the source or destination IP
address type. Use “Any” to include all possible addresses, “Host” to specify a
specific host address in the Address field, or “IPv6-Prefix” to specify a range of
addresses. (Options: Any, Host, IPv6-Prefix; Default: Any)
◆ Source/Destination IPv6 Address – An IPv6 address or network class. The
address must be formatted according to RFC 2373 “IPv6 Addressing
Architecture,” using 8 colon-separated 16-bit hexadecimal values. One double
colon may be used in the address to indicate the appropriate number of zeros
required to fill the undefined fields.
◆ Source/Destination Prefix-Length – A decimal value indicating how many
contiguous bits (from the left) of the address comprise the prefix; i.e., the
network portion of the address. (Range: 0-128 bits)
◆ DSCP – DSCP traffic class. (Range: 0-63)
To Next Page
Loading...
