Table of Contents
Advertisement
Item
When Host or Network is selected for the Source IP Filter, you can enter a specific SIP
SIP Address
address in dotted decimal notation.
When Network is selected for the Source IP Filter, you can enter a specific SIP mask in
SIP Mask
dotted decimal notation.
Specify the destination IP filter for this ACE.
•
Any: No Destination IP filter is specified. (Destination IP Filter is don't-care.)
•
Host: Destination IP Filter is set to Host. Specify the destination IP address in the DIP
DIP Filter
Address field that appears.
•
Network: Destination IP Filter is set to Network. Specify the destination IP address and
destination IP mask in the DIP Address and DIP Mask fields that appear.
When Host or Network is selected for the destination IP filter, you can enter a specific DIP
DIP Address
address in dotted decimal notation.
When Network is selected for the destination IP filter, you can enter a specific DIP mask in
DIP Mask
dotted decimal notation.
IPv6 Parameters
Specify the IPv6 next header filter for this ACE.
•
Any: No IPv6 next header filter is specified (don't-care).
•
Specific: If you want to filter a specific IPv6 next header filter with this ACE, choose
this value. A field for entering an IPv6 next header filter appears.
Next Header
•
ICMP: Select ICMP to filter IPv6 ICMP protocol frames. Extra fields for defining ICMP
Filter
parameters appears. These fields are explained later in this help file.
•
UDP: Select UDP to filter IPv6 UDP protocol frames. Extra fields for defining UDP
parameters appears. These fields are explained later in this help file.
•
TCP: Select TCP to filter IPv6 TCP protocol frames. Extra fields for defining TCP
parameters appears. These fields are explained later in this help file.
Next Header
When Specific is selected for the IPv6 next header value, you can enter a specific value. The
Value
allowed range is 0 to 255. A frame that hits this ACE matches this IPv6 protocol value.
Specify the source IPv6 filter for this ACE.
•
Any: No source IPv6 filter is specified. (Source IPv6 filter is don't-care.)
SIP Filter
•
Specific: Source IPv6 filter is set to Network. Specify the source IPv6 address and source
IPv6 mask in the SIP Address fields that appear.
When Specific is selected for the source IPv6 filter, you can enter a specific SIPv6 address.
SIP address
The field only supported last 32 bits for IPv6 address.
When Specific is selected for the source IPv6 filter, you can enter a specific SIPv6 mask. The
field only supported last 32 bits for IPv6 address. Notice the usage of bitmask, if the binary
bit value is 0, it means this bit is don't-care. The real matched pattern is [sipv6_address &
SIP BitMask
sipv6_bitmask] (last 32 bits). For example, if the SIPv6 address is 2001::3 and the SIPv6
bitmask is 0xFFFFFFFE(bit 0 is don't-care bit), then SIPv6 address 2001::2 and 2001::3
are applied to this rule.
RocketLinx MP1204-XT User Guide: 2000644 Rev. A
Configuration | Security | Network | ACL | Access Control List | ACE
Security | Network | ACL | Access Control List
Configuration (Continued)
Configuration Pages - 97
Advertisement
Table of Contents
