the destination IP address and destination IP mask in the DIP Address and DIP Mask fields that appear.
DIP Address: When "Host" or "Network" is selected for the DIP Filter, you can enter a specific DIP
address in dotted decimal notation.
DIP Mask: When "Network" is selected for the DIP Filter, you can enter a specific DIP mask in dotted
decimal notation.
IPv6 Parameters
The IPv6 parameters can be configured when Frame Type "IPv6" is selected.
Next Header Filter: Specify the IPv6 next header filter for this ACE. Any: No IPv6 next header filter is
specified ("don't-care"). ICMP: Select ICMP to filter IPv6 ICMP protocol frames. Extra fields for defining
ICMP parameters will appear. These fields are explained later in this section. UDP: Select UDP to filter
IPv6 UDP protocol frames. Extra fields for defining UDP parameters will appear. These fields are
explained later in this section. TCP: Select TCP to filter IPv6 TCP protocol frames. Extra fields for defining
TCP parameters will appear. These fields are explained later in this section. other: If you want to filter a
specific IPv6 next header filter with this ACE, choose this value. A field for entering an IPv6 next header
filter appears.
Next Header Value: When "other" is selected for the IPv6 next header value, you can enter a specific
value. The allowed range is 0 to 255. A frame that hits this ACE matches this IPv6 protocol value.
SIP Filter: Specify the source IPv6 filter for this ACE. Any: No source IPv6 filter is specified. (Source IPv6
filter is "don't-care".) Specific: Source IPv6 filter is set to Network. Specify the source IPv6 address and
source IPv6 mask in the SIP Address fields that appear.
SIP Address (32 bits): When "Specific" is selected for the source IPv6 filter, you can enter a specific
SIPv6 address. The field only supported last 32 bits for IPv6 address.
SIP BitMask (32 bits): When "Specific" is selected for the source IPv6 filter, you can enter a specific
SIPv6 mask. The field only supported last 32 bits for IPv6 address. Notice the usage of bitmask, if the
binary bit value is "0", it means this bit is "don't-care". The real matched pattern is [sipv6_address &
sipv6_bitmask] (last 32 bits). For example, if the SIPv6 address is 2001::3 and the SIPv6 bitmask is
0xFFFFFFFE(bit 0 is "don't-care" bit), then SIPv6 address 2001::2 and 2001::3 are applied to this rule.
Hop Limit: Specify the hop limit settings for this ACE. 0: IPv6 frames with a hop limit field greater than
zero must not be able to match this entry. 1: IPv6 frames with a hop limit field greater than zero must
be able to match this entry. Any: Any value is allowed ("don't-care").
To Next Page
Loading...