ZyXEL Communications NBG6616 User Manual page 145

The following table describes the labels in this screen.
Table 63 Configuration > Security > IPv6 Firewall
LABEL DESCRIPTION
ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC
4443. ICMPv6 has a preceding Next Header value of 58, which is different from the
value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use
ICMPv6 to report errors encountered in packet processing and perform other diagnostic
functions, such as "ping".
Respond to Ping on The NBG6616 will not respond to any incoming Ping requests when Disable is selected.
Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming
WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and WAN
Ping requests.
Apply Click Apply to save the settings.
Enable Firewall Rule
Enable Firewall Rule Select this check box to activate the firewall rules that you define (see Add Firewall
Rule below).
Apply Click Apply to save the settings.
Add Firewall Rule
Service Name Enter a name that identifies or describes the firewall rule.
MAC Address Enter the MAC address of the computer for which the firewall rule applies.
Dest_IP_Address Enter the IPv6 address of the computer to which traffic for the application or service is
entering.
The NBG6616 applies the firewall rule to traffic destined for this computer.
Source_IP_Address Enter the IPv6 address of the computer that initializes traffic for the application or
service.
The NBG6616 applies the firewall rule to traffic initiating from this computer.
Protocol Select the protocol (TCP, UDP or ICMP) used to transport the packets for which you
want to apply the firewall rule.
Dest Port Range Enter the port number/range of the destination that defines the traffic type, for
example TCP port 80 defines web traffic.
Source Port Range Enter the port number/range of the source that defines the traffic type, for example
TCP port 80 defines web traffic.
Add Rule Click Add Rule to save the firewall rule.
Firewall Rule
# This is your firewall rule number. The ordering of your rules is important as rules are
applied in turn.
ServiceName This is a name that identifies or describes the firewall rule.
MACaddress This is the MAC address of the computer for which the firewall rule applies.
DestIP This is the IP address of the computer to which traffic for the application or service is
entering.
SourceIP This is the IP address of the computer to which traffic for the application or service is
initialized.
Protocol This is the protocol (TCP, UDP or ICMP) used to transport the packets for which you
want to apply the firewall rule.
DestPortRange This is the port number/range of the destination that defines the traffic type, for
example TCP port 80 defines web traffic.
SourcePortRange This is the port number/range of the source that defines the traffic type, for example
TCP port 80 defines web traffic.
Action DROP - Traffic matching the conditions of the firewall rule is stopped.
Chapter 20 IPv6 Firewall
NBG6616 User's Guide
145