Planet WGSD-10020 Series User Manual page 220

 DIP Address
 DIP Mask

IPv6 Parameters
Object

Next Header Fliter

Next Header Value

SIP Filter
 SIP Address
 SIP BitMask
User's Manual of WGSD / WGSW Layer 2+ Series
that appear.
When "Host" or "Network" is selected for the destination IP filter, you can enter a
specific DIP address in dotted decimal notation.
When "Network" is selected for the destination IP filter, you can enter a specific
DIP mask in dotted decimal notation.
Description
Specify the IPv6 next header filter for this ACE.
Any: No IPv6 next header filter is specified ("don't-care").
■
Specific: If you want to filter a specific IPv6 next header filter with this
■
ACE, choose this value. A field for entering an IPv6 next header filter
appears.
ICMP: Select ICMP to filter IPv6 ICMP protocol frames. Extra fields for
■
defining ICMP parameters will appear. These fields are explained later in
this help file.
UDP: Select UDP to filter IPv6 UDP protocol frames. Extra fields for
■
defining UDP parameters will appear. These fields are explained later in
this help file.
TCP: Select TCP to filter IPv6 TCP protocol frames. Extra fields for defining
■
TCP parameters will appear. These fields are explained later in this help
file.
When "Specific" is selected for the IPv6 next header value, you can enter a
specific value. The allowed range is 0 to 255. A frame that hits this ACE matches
this IPv6 protocol value.
Specify the source IPv6 filter for this ACE.
Any: No source IPv6 filter is specified. (Source IPv6 filter is "don't-care".)
■
Specific: Source IPv6 filter is set to Network. Specify the source IPv6
■
address and source IPv6 mask in the SIP Address fields that appear.
When "Specific" is selected for the source IPv6 filter, you can enter a specific
SIPv6 address. The field only supported last 32 bits for IPv6 address.
When "Specific" is selected for the source IPv6 filter, you can enter a specific
SIPv6 mask. The field only supported last 32 bits for IPv6 address. Notice the
usage of bitmask, if the binary bit value is "0", it means this bit is "don't-care".
The real matched pattern is [sipv6_address & sipv6_bitmask] (last 32 bits). For
example, if the SIPv6 address is 2001::3 and the SIPv6 bitmask is
0xFFFFFFFE(bit 0 is "don't-care" bit), then SIPv6 address 2001::2 and 2001::3
are applied to this rule.
220