User Manual

Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power
Manage Switch Security User Manual362
• Match Every. From the Match Every menu, select whether all packets must match
the selected IPv6 ACL rule:
- False. Not all packets need to match the selected IPv6 ACL rule. You can
configure other match criteria on the page.
- True. All packets must match the selected IPv6 ACL rule and are either permitted
or denied. In this case, you cannot configure other match criteria on the page.
• Protocol Type. Specify the IPv6 protocol type in one of the following ways:
- From the Protocol Type menu, select IPv6, ICMPv6, TCP, or UDP.
- From the Protocol Type menu, select Other, and in the associated field, specify
an integer ranging from 0 to 255. This number represents the IPv6 protocol.
• Src. In the Src field, enter a source IPv6 address or source IPv6 address range to be
compared to a packet’s source IPv6 address as a match criterion for the selected
IPv6 ACL rule:
- If you select the IP Address radio button, enter an IPv6 address or IPv6 range to
apply this criteria. If this field is left empty, it means any.
- If you select the Host radio button, enter a host source IPv6 address to match the
specified IPv6 address. If this field is left empty, it means any.
The source IPv6 address argument must be in the form documented in RFC 2373
where the address is specified in hexadecimal numbers using 16-bit values between
colons.
• Src L4. The options are available only when the protocol is set to TCP or UDP. Use the
source L4 port option to specify relevant matching conditions for L4 port numbers in
the extended ACL rule.
You can select either the Port radio button or the Range radio button:
- Port. If you select the Port radio button, you can either enter the port number
yourself or select one of the following protocols from the menu:
• The source IP TCP port protocols are domain, echo, ftp, ftpdata, www-http,
smtp, telnet, pop2, pop3, and bgp.
• The source IP UDP port protocols are domain, echo, snmp, ntp, rip, time,
who, and tftp.
Each of these values translates into its equivalent port number, which is used as
both the start and end of the port range.
Select Other from the menu to enter a port number. If you select Other from the
menu but leave the field blank, it means any.
The only relevant matching condition for L4 port numbers is Equal. This means
that an IPv6 ACL rule matches only if the Layer 4 source port number is equal to
the specified port number or port protocol.
- Range. If you select the Range radio button, the IPv6 ACL rule matches only if
the Layer
4 source port number is within the specified port range. The starting
port, ending port, and all ports in between are a part of the Layer 4 port range.