User Manual

Manage Device Security
364
M4100 Series Managed Switch
• Select one of the keywords from the list: DOMAIN, ECHO, FTP, FTPDATA,
WWW-HTTP, SMTP, SNMP, TELNET, and TFTP. Each of these values translates into
its equivalent port number, which is used as both the start and end of the port range.
18. Use Destination Prefix / Prefix Length to enter prefix combined with prefix length to be
compared to a packet's destination IP address as a match criteria for the selected IPv6 ACL
rule.
The prefix length can be in the range 0 to 128.
19. Use Destination L4 Port to specify a packet's destination Layer 4 port as a match condition
for the selected IPv6 ACL rule.
Destination port information is optional. Destination port information can be specified in
two ways:
• Select the keyword other and specify the number of the port in the range from 0 to
65535.
• Select one of the keywords from the list: DOMAIN, ECHO, FTP, FTPDATA,
WWW-HTTP, SMTP, SNMP, TELNET, and TFTP. Each of these values translates into
its equivalent port number, which is used as both the start and end of the port range.
20. Flow Label. Flow label is 20-bit number that is unique to an IPv6 packet, used by end
stations to signify quality-of-service handling in routers.
Flow label can specified within the range 0 to 1048575.
21. Use IPv6 DSCP Service to specify the IP DiffServ Code Point (DSCP) field. The DSCP is
defined as the high-order six bits of the service type octet in the IPv6 header.
This is an optional configuration. Enter an integer from 0 to 63. The IPv6 DSCP is
selected by possibly selection one of the DSCP keyword from a field. If a value is to be
selected by specifying its numeric value, then select the 'Other' option in the field and a
text box displays where you can enter the numeric value of the DSCP.
22. Rate Limit Conform Data Rate. Value of Rate Limit Conform Data Rate specifies the
conforming data rate of IPv6 ACL rule.
The valid values are 1 to 4294967295 in Kbps.
23. Rate Limit Burst Size. Value of Rate Limit Burst Size specifies the burst size of the IPv6
ACL rule.
The valid values are 1 to 128 in Kbytes.
24. Time Range. Name of time range associated with the IPv6 ACL rule.
25. Rule Status. Displays if the ACL rule is active or inactive.
Blank means that no timer schedules are assigned to the rule.
26. To add an IPv6 rule, click the ADD button.
27. To delete a rule, select it an click the DELETE button.