NETGEAR GS752TP Software Administration Manual page 204

GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches
The following screen appears:
3. Configure the settings for the new rule.
• Rule ID. Enter a whole number in the range of 1–10 that is used to identify the rule.
An IPv6 ACL might have up to 10 rules.
• Action. Specify what action must be taken if a packet matches the rule's criteria. The
choices are Permit or Deny.
• Logging. When set to Enable, logging is enabled for this ACL rule (subject to
resource availability in the device). If the access list trap flag is also enabled, this
causes periodic traps to be generated indicating the number of times this rule was hit
during the current report interval. A fixed 5-minute report interval is used for the entire
system. A trap is not issued if the ACL rule hit count is 0 for the current interval. This
field is visible for a deny action.
• Match Every. Select Enable or Disable. Enable signifies that all packets that match
the selected IPv6 ACL and rule are either permitted or denied. In this case, since all
packets match the rule, the option of configuring other match criteria is not offered. To
configure specific match criteria for the rule, remove the rule and recreate it, or for
Match Every select Disable for the other match criteria to be visible.
• Protocol. There are two ways to configure IPv6 protocol:
• After selecting protocol keyword other, specify an integer ranging from 0 to 255.
This number represents the IPv6 protocol.
• Select name of a protocol from the existing list of IPv6, ICMPv6, TCP, and UDP.
• Source Prefix and Prefix Length. Specify the IPv6 Prefix combined with IPv6 Prefix
length of the network or host from which the packet is being sent. The valid range for
the prefix length is 0–128.
• Source L4 Port. Specify a packet's source layer 4 port as a match condition for the
selected IPv6 ACL rule. Source port information is optional. Source port information
can be specified in two ways:
Managing Device Security
204