User Manual

M4300 Intelligent Edge Series Fully Managed Stackable Switches
Manage Switch Security User Manual626
The source IPv6 address argument must be in the form documented in RFC 2373
where the address is specified in hexadecimal using 16-bit values between colons.
• Dst L4. The options are available only when protocol is set to TCP or UDP. Use the
destination L4 port option to specify relevant matching conditions for L4 port numbers
in the extended ACL rule.
You can select either the Port radio button or the Range radio button:
- If you select the Port radio button, you can either select port key from the menu
or enter the port number yourself.
• The destination IP
TCP port names are bgp, domain, echo, ftp, ftpdata, http,
smtp, snmp, Telnet, www, pop2, pop3.
• The destination IP UDP port names are domain, echo, ntp, rip, snmp, tftp,
time, who.
Each of these values translates into its equivalent port number, which is used as
both the start and end of the port range.
Select Other from the menu to enter a port number
. If you select Other from the
menu but leave the field blank, it means any.
The relevant matching conditions for L4 port numbers are as follows:
• Equal.
The IPv6 ACL rule matches only if the Layer 4 destination port number
is equal to the specified port number or port key.
• Less Than. The
IPv6 ACL rule matches if the Layer 4 destination port number
is less than the specified port number or port key.
• Greater Than.
The IPv6 ACL rule matches if the Layer 4 destination port
number is greater than the specified port number or port key.
• Not Equal.
The IPv6 ACL rule matches only if the Layer 4 destination port
number is not equal to the specified port number or port key.
- If you select the Range radio button, the IPv6
ACL rule matches only if the Layer
4 destination port number is within the specified port range. The starting port,
ending port, and all ports in between are a part of the Layer 4 port range.
The Start Port and End Port fields identify the first and last ports that are part of
the port range.
They values can range from 0 to 65535.
Select Other from the menu to enter port numbers. If you select Other from the
menu but leave the fields blank, it means any.
• IGMPv6 Type. If you specify the IGMPv6 type, the IPv6 ACL rule matches the
specified IGMPv6 message type. Possible values are in the range 0 to 255. If this field
is left empty, it means any.
• ICMPv6. Select either the ICMP T
ype or ICMP Message radio button:
- If you select the ICMP T
ype radio button, note the following:
• The ICMP T
ype and ICMP Code fields are enabled only if the protocol is
ICMPv6. Use these fields to specify a match condition for ICMPv6 packets: