Huawei S1700 Series - Page 99

S1700 Managed Series Ethernet Switches
Web User Manual
6 ACL Configuration
Issue 05 (2012-10-25)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
89
Figure 6-7 Create Rule of Extending IPv6
Table 6-7 Parameters of Extending IPv6 Rule
Item
Description
ACL ID
ACL entry number that rule belongs to.
Rule ID
Enter rule number, and the value ranges from 1 to 65535. If not
specified, the system will assign automatically.
Action
Specify switch to permit or deny data stream that matches to the rule.
Protocol Type
Specify IP v6 protocol type to be matched with data (Next Header
Field).
Match IPv6
Source IPv6 address: All source IPv6 - specify this rule to be applied
to all IP data packages; Specify Source IP/Prefix Length - specify this
rule to be applied to the IP data package of specified IP address//prefix
length. The IP address will match the whole field if no mask entered.
Destination IPv6 address: All Destination IPv6 – specify this rule to
be applied to all IP data packages; Specify Destination IP/Prefix
Length - specify this rule to be applied to the IP data package of
specified IP address//prefix length. The IP address will match the
whole field if no mask entered.
Match Port
Specify the TCP / UDP source port and destination port for data to be
matched.
Match Message
Specify service level and Flow Label for data to be matched.
TCP Flag
Specify the TCP flag field for data to be matched.
Match ICMP
Specify the ICMP field including ICMP type and Message Code for
data to be matched.
Fragments
Use checkbox to specify whether to match packet fragmentation for
this kind of protocol.