Juniper ACX1000 Configuration Manual page 1116

ACX Series Universal Access Router Configuration Guide
Table 74: Firewall Filter Match Conditions for IPv6 Traffic
Match Condition
destination-address address
destination-port number
destination-prefix-list
extension-headers
header-type
hop-limit hop-limit
1058
Description
Match the IPv6 destination address field.
Match the UDP or TCP destination port field.
You cannot specify both the
port
If you configure this match condition, we recommend that you also configure the
udp or next-header tcp match condition in the same term to specify which protocol is being used
on the port.
In place of the numeric value, you can specify one of the following text synonyms (the port
numbers are also listed): afs (1483),
(2401), (67),
cvspserver dhcp
(21), (20), (80),
ftp ftp-data http
(543), (761),
klogin kpasswd krb-prop
(513), (434),
login mobileip-agent
(137), (139),
netbios-ns netbios-ssn
pptp (1723), printer (515), radacct
snmp (161), snmptrap (162), snpp
tacacs (49), tacacs-ds (65), talk
Match IP destination prefixes in named list.
Match an extension header type that is contained in the packet by identifying a Next Header
value.
In the first fragment of a packet, the filter searches for a match in any of the extension header
types. When a packet with a fragment header is found (a subsequent fragment), the filter only
searches for a match of the next extension header type because the location of other extension
headers is unpredictable.
In place of the numeric value, you can specify one of the following text synonyms (the field values
are also listed): (51),
ah destination
or (43).
routing
To match any value for the extension header option, use the text synonym
NOTE: Only the first extension header of the IPv6 packet can be matched. L4 header beyond
one IPv6 extension header will be matched.
Match the hop limit to the specified hop limit or set of hop limits. For
value or a range of values from 0 through 255.
and match conditions in the same term.
destination-port
bgp (179), biff (512), bootpc
(53), (2105),
domain eklogin ekshell
(443), (113),
https ident imap
(754), (760),
krbupdate
(435), (639),
mobilip-mn msdp
(2049), (119),
nfsd nntp
(1813), radius (1812), rip (520),
(444), socks (1080), ssh (22),
(517), telnet (23), tftp (69), timed
(60), (50),
esp fragment
next-header
(68), bootps (67), cmd (514),
(2106), (512),
exec finger
(143), (88),
kerberos-sec
(544), (389),
kshell ldap ldp
(138),
netbios-dgm
(518), (123), (110),
ntalk ntp pop3
rkinit (2108), smtp (25),
sunrpc (111), syslog (514),
(525), who (513), or xdmcp
(44), (0),
hop-by-hop mobility
any .
hop-limit , specify a single
Copyright © 2017, Juniper Networks, Inc.
(79),
(646),
(177).
(135),