Chapter4ServiceConguration
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
ipv6udp
ThisruleisonlyvalidforIPv6UDPpacket.Otherpacketsignore
thisrule.
<source-ipv6addr>
IPv6Sourcenetworkorhostofthetransmittedpackage.The
standardIPv6addressformatisused,suchasabcd:EF12::1234
<sipv6-mask>
Sourcemaskandusedforsource.Itisexpressedbyaninteger.
Therangeis1to128.
any(rst)
MatchesallsourceIPv6addresses,sourceandsourcemaskare
all0s.
source-port<0-65535>
TCPsourceportnumberofthetransmittedpacket
Thesource-portparameterresolvesomeknownportnumber.
Alsotheportnumberandmaskcanbeentered.
<sport-mask>Sourceportmask.
<destination-ipv6addr>
ThedestinationnetworkorhostaddressofthetransmittedIPv6
packet.ThestandardIPv6addressformatisused,suchas
abcd:EF12::1234.
<dipv6-mask>
Destinationmask.Itisusedfordestinationandrepresentedby
oneinteger.Thevaluerangeis1to128.
any(second)
MatchesalldestinationIPv6addresses.Thedestinationand
destinationmaskareall0s.
dest-port<0-65535>
TCPdestinationportnumberofthetransmittedpacket
Thedest-portparameterresolvesomeknownportnumber.Also
theportnumberandmaskcanbeentered.
<dport-mask>Destinationportmask.
<vlan-id>
ThisruleisonlyvalidformessageswiththespeciedVLANID.
Ignorethisruleforothermessages.TheruleofVLANIDis1
to4094.
Guidelines
TheIPv6-UDPrulecanmatchsource-speciedIPv6,anysourceIPv6,
destination-speciedIPv6,anydestinationIPv6,UDPsourceportnumbers,UDP
destinationportnumbers,andVLANelds.
4-245
SJ-20130731155059-003|2013-11-27(R1.0)ZTEProprietaryandCondential