User Manual

Manage Device Security
669
M6100, M5300, and M7100 Series Managed Switches
Specify an integer ranging from 1 to 255 after selecting protocol keyword other.
This number represents the IP protocol.
Select name of a protocol from the existing list of Internet Protocol (IPv6),
Transmission Control Protocol (TCP), User Datagram Protocol (UDP) and Internet
Control Message Protocol (ICMPv6).
- Src. Specify a source IPv6 address to match with the selected IPv6 ACL rule.
When the IPv6 Address radio button is selected, enter an IPv6 address with
prefix length to match the IPv6 ACL rule. If these fields are left empty, it means
any.
When the Host radio button is selected, enter a host source IPv6 address to
match the specified IPv6 address. If this field is left empty, it means any.
This source IPv6 address argument must be in the form documented in RFC 2373
where the address is specified in hexadecimal using 16-bit values between colons.
17. Src L4 Port options are enabled only for TCP or UDP protocols:
• Source L4 TCP port names are bgp, domain, echo, ftp, ftpdata, http, smtp, Telnet,
www, pop2, pop3.
• Source L4 UDP port names are domain, echo, ntp, rip, snmp, tftp, time, who.
When the Port option is selected, select the port key from the list or enter a port number.
You can enter your own port number only when Other is selected in the list of port keys. If
this field is left empty, it means any.
18. Src L4 Port Action specifies the relevant matching condition for Layer 4 port numbers in
the current extended rule:
• Equal. IPv6 ACL rule matches only if the Layer 4 source port number is equal to the
specified port number or port key.
• Less Than. IPv6 ACL rule matches if the Layer 4 source port number is less than the
specified port number or port key.
• Greater Than. IPv6 ACL rule matches if the Layer 4 source port number is greater
than the specified port number or port key.
• Not Equal. IPv6 ACL rule matches only if the Layer 4 source port number is not equal
to the specified port number or port key.
19. Dst L4 Port options are enabled only for TCP or UDP protocols:
• Destination L4 TCP port names are bgp, domain, echo, ftp, ftpdata, http, smtp, Telnet,
www, pop2, pop3.
• Destination L4 UDP port names are domain, echo, ntp, rip, snmp, tftp, time, who.
When the Port option is selected, select the port key from the list or enter a port number.
You can enter your own port number only when Other is selected in the list of port keys. If
this field is left empty, it means any.
20. Destination L4 Port Action specifies the relevant matching condition for Layer 4 port
numbers in the current extended ACL rule: