NETGEAR XS708T User Manual page 349

XS708T, XS712Tv2, and XS716T Smart Managed Pro Switch User Manual
• Greater Than. The IPv6 ACL rule matches if the Layer 4 destination port
number is greater than the specified port number.
• Not Equal. The IPv6 ACL rule matches only if the Layer 4 destination port
number is not equal to the specified port number or port protocol.
- If you select the Range radio button, the IPv6 ACL rule matches only if the
Layer 4 destination port number is within the specified port range. The starting
port, ending port, and all ports in between are a part of the Layer 4 port range.
The Start Port and End Port fields identify the first and last ports that are part of
the port range. They values can range from 0 to 65535.
You can either enter the port range yourself or select one of the following
protocols from the menu:
• The destination IP TCP port protocols are domain, echo, ftp, ftpdata,
www-http, smtp, telnet, pop2, pop3, and bgp.
• The destination IP UDP port protocols are domain, echo, snmp, ntp, rip,
time, who, and tftp.
Each of these values translates into its equivalent port number, which is used as
both the start and end of the port range.
Select Other from the menu to enter port numbers. If you select Other from the
menu but leave the fields blank, it means any.
• ICMPv6. Select either the Type or Message radio button:
- If you select the Type radio button, note the following:
• The Type and Message fields are enabled only if the protocol is ICMPv6. Use
these fields to specify a match condition for ICMPv6 packets.
• The IPv6 ACL rule matches the specified ICMPv6 message type. Possible
type numbers are in the range from 0 to 255.
• If you specify information in the Message field, the IPv6 ACL rule matches the
specified ICMPv6 message code. Possible values for code can be in the
range from 0 to 255.
• If these fields are left empty, it means any.
- If you select the Message radio button, select the type of the ICMPv6 message to
match with the selected IPv6 ACL rule. Specifying a type of message implies that
both the ICMPv6 type and ICMPv6 code are specified. The ICMPv6 message is
decoded into the corresponding ICMPv6 type and ICMPv6 code within the ICMP
type.
The ICMPv6 message types are destination-unreachable, echo-reply,
echo-request, header, hop-limit, mld-query, mld-reduction, mld-report,
nd-na, nd-ns, next-header, no-admin, no-route, packet-too-big,
port-unreachable, router-solicitation, router-advertisement,
router-renumbering, time-exceeded, and unreachable.
Manage Device Security
349