User's Manual

465
Item Descri
p
tion
Check Fragment
Select this box to apply the rule to only non-first fragments.
If you do no select this box, the rule applies to all fragments and
non-fragments.
Check Logging
Select this box to keep a log of matched IPv6 packets.
A log entry contains the ACL rule number, operation for the matched
packets, protocol number, source/destination address,
source/destination port number, and number of matched packets.
This function is not supported.
IP
Address
Filter
Source IP Address
Select the Source IP Address box and enter a source IPv6 address and
prefix length.
The IPv6 address must be in a format like X:X::X:X. An IPv6 address
consists of eight 16-bit long fields, each of which is expressed with
two hexadecimal numbers and separated from its neighboring fields
by colon (:).
Source Prefix
Destination IP Address
Select the Destination IP Address box and enter a destination IPv6
address and prefix length.
The IPv6 address must be in a format like X:X::X:X. An IPv6 address
consists of eight 16-bit long fields, each of which is expressed with
two hexadecimal numbers and separated from its neighboring fields
by colon (:).
Destination Prefix
Protocol
Select the protocol number.
If you select 58 ICMPv6, you can configure the ICMP message type
and code. If you select 6 TCP or 17 UDP, you can configure the TCP or
UDP specific items.
ICMPv6
Type
Named ICMPv6 Type Specify the ICMPv6 message type and code.
These items are available only when you select 58 ICMPv6 from the
Protocol list.
If you select Other from the Named ICMPv6 Type list, you need to enter
values in the ICMPv6 Type and ICMPv6 Code fields. Otherwise, the
two fields will take the default values, which cannot be changed.
ICMPv6 Type
ICMPv6 Code
TCP/UDP
Port
Source
Operator
Select the operators and enter the source port numbers and
destination port numbers as required.
These items are available only when you select 6 TCP or 17 UDP from
the Protocol list.
Different operators have different configuration requirements for the
port number fields:
• Not Check—The following port number fields cannot be
configured.
• Range—The following port number fields must be configured to
define a port range.
• Other values—The first port number field must be configured and
the second must not.
Only Not Check and Other values are supported.
Port
To Port
Destinati
on
Operator
Port
To Port
Time Range Select the time range during which the rule takes effect.