H3C WA2612-AGN Web-Based Configuration Manual page 377

4. Click Add.
Table 118 Configuration items
Item
Select Access Control List (ACL)
Rule ID
Operation
Check Fragment
Check Logging
Source IP Address
Source Prefix
IP
Address
Destination IP
Filter
Address
Destination Prefix
Protocol
Named ICMPv6 Type
ICMPv6
ICMPv6 Type
Type
ICMPv6 Code
Description
Select the advanced IPv6 ACL for which you want to configure rules.
Available ACLs are advanced IPv6 ACLs.
Select the Rule ID option and enter a number for the rule.
If you do not specify the rule number, the system assigns one
automatically.
IMPORTANT:
If the rule number you specify already exists, the following operations
modify the configuration of the rule.
Select the operation to be performed for IPv6 packets matching the rule.
•
Permit—Allows matching packets to pass.
•
Deny—Drops matching packets.
Select this option to apply the rule to only non-first fragments.
If you do no select this option, the rule applies to all fragments and
non-fragments.
Select this option to log matching IPv6 packets.
A log entry contains the ACL rule number, action on the matching packets,
protocol that IP carries, source/destination address, source/destination
port number, and number of matching packets.
Select the Source IP Address option and enter a source IPv6 address and
prefix length.
The IPv6 address must be in a format like X:X::X:X. An IPv6 address
consists of eight 16-bit long fields, each of which is expressed with two
hexadecimal numbers and separated from its neighboring fields by colon
(:).
Select the Destination IP Address option and enter a destination IPv6
address and prefix length.
The IPv6 address must be in a format like X:X::X:X. An IPv6 address
consists of eight 16-bit long fields, each of which is expressed with two
hexadecimal numbers and separated from its neighboring fields by colon
(:).
Select the protocol to be carried by IP.
If you select 58 ICMPv6, you can configure the ICMP message type and
code; if you select 6 TCP or 17 UDP, you can configure the TCP or UDP
specific items.
Specify the ICMPv6 message type and code.
These items are available only when you select 58 ICMPv6 from the
Protocol list.
If you select Other from the Named ICMPv6 Type list, you must enter
values in the ICMPv6 Type and ICMPv6 Code fields. Otherwise, the two
fields take the default values, which cannot be changed.
364