Web Management Guide-R02

Chapter 12 | Security Measures
Access Control Lists
– 336 –
◆ Source Address Type – Specifies the source IP address type. Use “Any” to
include all possible addresses, “Host” to specify a specific host address in the
Address field, or “IPv6-Prefix” to specify a range of addresses. (Options: Any,
Host, IPv6-Prefix; Default: Any)
◆ Destination Address Type – Specifies the destination IP address type. Use
“Any” to include all possible addresses, or “IPv6-Prefix” to specify a range of
addresses. (Options: Any, IPv6-Prefix; Default: Any)
◆ Source/Destination IPv6 Address – An IPv6 address or network class. The
address must be formatted according to RFC 2373 “IPv6 Addressing
Architecture,” using 8 colon-separated 16-bit hexadecimal values. One double
colon may be used in the address to indicate the appropriate number of zeros
required to fill the undefined fields.
◆ Source/Destination Prefix-Length – A decimal value indicating how many
contiguous bits (from the left) of the address comprise the prefix; i.e., the
network portion of the address. (Range: 0-128 bits for the source prefix; 0-8 bits
for the destination prefix)
◆ DSCP – DSCP traffic class. (Range: 0-63)
◆ Source Port – Protocol
9
source port number. (Range: 0-65535)
◆ Source Port Bit Mask – Decimal number representing the port bits to match.
(Range: 0-65535)
◆ Destination Port – Protocol
9
destination port number. (Range: 0-65535)
◆ Destination Port Bit Mask – Decimal number representing the port bits to
match. (Range: 0-65535)
◆ Time Range – Name of a time range.
Web Interface
To add rules to an Extended IPv6 ACL:
1. Click Security, ACL.
2. Select Configure ACL from the Step list.
3. Select Add Rule from the Action list.
4. Select IPv6 Extended from the Type list.
5. Select the name of an ACL from the Name list.
6. Specify the action (i.e., Permit or Deny).
9. Includes TCP, UDP or other protocol types.