User Manual

Manage Device Security
670
M6100, M5300, and M7100 Series Managed Switches
• Equal. IPv6 ACL rule matches only if the Layer 4 source port number is equal to the
specified port number or port key.
• Less Than. IPv6 ACL rule matches if the Layer 4 source port number is less than the
specified port number or port key.
• Greater Than. IPv6 ACL rule matches if the Layer 4 source port number is greater
than the specified port number or port key.
• Not Equal. IPv6 ACL rule matches only if the Layer 4 source port number is not equal
to the specified port number or port key.
21. Fragments. The rule to match the packets that are noninitial fragments (fragment bit
asserted).
This option is not valid for rules that match L4 information such as TCP port number,
since that information is carried in the initial packet.
22. Routing. The rule to match the packets that include a routing extension header.
23. ICMPv6 Type. Specifies a match condition for ICMP packets.
When the Type radio button is selected, the IPv6 ACL rule matches the specified ICMPv6
message type. Possible type numbers are in range from 0 to 255. When ICMPv6 code is
specified, IP ACL rule matches with the specified ICMPv6 message code. Possible
values are in the range from 0 to 255. If this field is left empty, it means any.
24. When the Message radio button is selected, select the type of the ICMPv6 messages to
match the selected IPv6 ACL rule.
Specifying Message implies that both ICMPv6 type and ICMPv6 code are specified. The
ICMPv6 message is decoded into the corresponding ICMPv6 type and ICMPv6 code
within that ICMPv6 type. IPv6 ICMPv6 message types are destination-unreachable,
echo-reply, echo-request, header, hop-limit, mld-query, mld-reduction, mld-report, nd-na,
nd-ns, next-header, no-admin, no-route, packet-too-big, port-unreachable,
router-solicitation, router-advertisement, router-renumbering, time-exceeded, and
unreachable.
Note: The following fields are enabled only if the protocol is ICMPv6.
25. Flow Label. Flow label is 20-bit number that is unique to an IPv6 packet, used by end
stations to signify quality-of-service handling in routers.
Flow label can specified within the range 0 to 1048575.
26. Use IPv6 DSCP Service to specify the IP DiffServ Code Point (DSCP) field.
The DSCP is defined as the high-order six bits of the service type octet in the IPv6
header. This is an optional configuration. Enter an integer from 0 to 63. To select the IPv6
DSCP, select one of the DSCP keywords. If a value is to be selected by specifying its
numeric value, then select Other and a field appears where you can enter the numeric
value of the DSCP.
27. Rate Limit Conform Data Rate. Specify the conforming data rate of the IPv6 ACL rule.