Table of Contents
Advertisement
Chapter 13. Access Control
When "Specific" is selected for the IPv6 next header value, you can enter a
specific value. The allowed range is 0 to 255. A frame that hits this ACE
matches this IPv6 protocol value.
SIP Filter:
Specify the source IPv6 filter for this ACE.
Any: No source IPv6 filter is specified. (Source IPv6 filter is "don't-care".)
Specific: Source IPv6 filter is set to Network. Specify the source IPv6 address
and source IPv6 mask in the SIP Address fields that appear.
SIP Address:
When "Specific" is selected for the source IPv6 filter, you can enter a specific
SIPv6 address. The field only supported last 32 bits for IPv6 address.
SIP BitMask:
When "Specific" is selected for the source IPv6 filter, you can enter a specific
SIPv6 mask. The field only supported last 32 bits for IPv6 address. Notice the
usage of bitmask, if the binary bit value is "0", it means this bit is "don't-care".
The real matched pattern is [sipv6_address & sipv6_bitmask] (last 32 bits). For
example, if the SIPv6 address is 2001::3 and the SIPv6 bitmask is
0xFFFFFFFE(bit 0 is "don't-care" bit), then SIPv6 address 2001::2 and 2001::3
are applied to this rule.
Hop Limit:
Specify the hop limit settings for this ACE.
zero: IPv6 frames with a hop limit field greater than zero must not be able to
match this entry.
non-zero: IPv6 frames with a hop limit field greater than zero must be able to
match this entry.
Any: Any value is allowed ("don't-care").
ICMP Parameters
ICMP Type Filter:
Specify the ICMP filter for this ACE.
Any: No ICMP filter is specified (ICMP filter status is "don't-care").
Specific: If you want to filter a specific ICMP filter with this ACE, you can
enter a specific ICMP value. A field for entering an ICMP value appears.
ICMP Type Value:
349
Advertisement
Table of Contents
