Manage Device Security
612
M4300 Series and M4300-96X Fully Managed Switches User Manual
• Equal. The IPv6 ACL rule matches only if the Layer 4 destination port number
is equal to the specified port number or port key.
• Less Than. The IPv6
ACL rule matches if the Layer 4 destination port number
is less than the specified port number or port key.
• Greater Than. The IPv6
ACL rule matches if the Layer 4 destination port
number is greater than the specified port number or port key.
• Not Equal. The IPv6
ACL rule matches only if the Layer 4 destination port
number is not equal to the specified port number or port key.
- If you select the Range radio button, the IPv6 ACL rule matches only if the Layer
4 destination port number is within the specified port range.
The starting port,
ending port, and all ports in between are a part of the Layer 4 port range.
The Start Port and End Port fields identify the first and last ports that are part of
the port range. They values can range from 0 to 65535.
Select
Other from the menu to enter port numbers. If you select Other from the
menu but leave the fields blank, it means any.
• IGMPv6 Type. If you specify the IGMPv6 type, the IPv6 ACL rule matches the
specified IGMPv6 message type. Possible values are in the range 0 to 255. If this field
is left empty, it means any.
• ICMPv6. Select either the ICMP Type or
ICMP Message radio button:
- If you select the ICMP Type
radio button, note the following:
• The ICMP Type and
ICMP Code fields are enabled only if the protocol is
ICMPv6. Use these fields to specify a match condition for ICMPv6 packets:
• The IPv6 ACL rule matches the specified ICMPv6 message type. Possible
type numbers are in the range from 0 to 255.
• If you specify information in the
ICMP Code field, the IPv6 ACL rule matches
the specified ICMPv6 message code. Possible values for code can be in the
range from 0 to 255.
• If these fields are left empty, it means any.
- If you select the
ICMP Message radio button, select the type of the ICMPv6
message to match with the selected IPv6 ACL rule. Specifying a type of message
implies that both the ICMPv6 type and ICMPv6 code are specified.
The ICMPv6
message is decoded into the corresponding ICMPv6 type and ICMPv6 code
within the ICMP type.
The ICMPv6 message types are: destination-unreachable, echo-reply,
echo-request, header
, hop-limit, mld-query
, mld-reduction, mld-report, nd-na,
nd-ns, next-header, no-admin, no-route, packet-too-big, port-unreachable,
router-solicitation, router-advertisement, router-renumbering, time-exceeded, and
unreachable.
• Fragments. Either select Enable to allow initial fragments (that is, the fragment bit is
asserted) or leave the default setting at Disable to prevent initial fragments from
being used.
To Next Page
Loading...
