Huawei S1700 Series Web User Manual page 99

S1700 Managed Series Ethernet Switches
Web User Manual
Figure 6-7 Create Rule of Extending IPv6
Table 6-7 Parameters of Extending IPv6 Rule
Item
ACL ID
Rule ID
Action
Protocol Type
Match IPv6
Match Port
Match Message
TCP Flag
Match ICMP
Fragments
Issue 05 (2012-10-25)
Description
ACL entry number that rule belongs to.
Enter rule number, and the value ranges from 1 to 65535. If not
specified, the system will assign automatically.
Specify switch to permit or deny data stream that matches to the rule.
Specify IP v6 protocol type to be matched with data (Next Header
Field).
Source IPv6 address: All source IPv6 - specify this rule to be applied
to all IP data packages; Specify Source IP/Prefix Length - specify this
rule to be applied to the IP data package of specified IP address//prefix
length. The IP address will match the whole field if no mask entered.
Destination IPv6 address: All Destination IPv6 – specify this rule to
be applied to all IP data packages; Specify Destination IP/Prefix
Length - specify this rule to be applied to the IP data package of
specified IP address//prefix length. The IP address will match the
whole field if no mask entered.
Specify the TCP / UDP source port and destination port for data to be
matched.
Specify service level and Flow Label for data to be matched.
Specify the TCP flag field for data to be matched.
Specify the ICMP field including ICMP type and Message Code for
data to be matched.
Use checkbox to specify whether to match packet fragmentation for
this kind of protocol.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 ACL Configuration
89