Security Measures
161
Instruction Manual - NXA-ENET8-POE+
Perform these steps to add rules to a Standard IPv6 ACL:
1.
Click
Security
>
ACL
.
2.
Select
Configure ACL
from the Step list.
3.
Select
Add Rule
from the Action list.
4.
Select
IPv6 Standard
from the Type list.
5.
Select the name of an ACL from the Name list.
6.
Specify the action (i.e., Permit or Deny).
7.
Select the source address type (Any, Host, or IPv6-prefix). If you select Host, enter a specific address. If you select
IPv6-prefix, enter a subnet address and the prefix length.
8.
Click
Apply
.
Configuring an Extended IPv6 ACL
Use the Security > ACL (Configure ACL - Add Rule - IPv6 Extended) page to configure an Extended IPv6 ACL.
The following table lists the options on this page:
FIG. 190
Configuring a Standard IPv6 ACL
Security - ACL Options
Type
Selects the type of ACLs to show in the Name list.
Name
Shows the names of ACLs matching the selected type.
Action
An ACL can contain any combination of permit or deny rules.
Source Address Type
Specifies the source IP address type. Use Any to include all possible addresses, Host to specify a
specific host address in the Address field, or IPv6-Prefix to specify a range of addresses. (Options:
Any, Host, IPv6-Prefix; Default: Any)
Destination Address Type
Specifies the destination IP address type. Use Any to include all possible addresses, or IPv6-Prefix
to specify a range of addresses. (Options: Any, IPv6-Prefix; Default: Any)
Source/Destination IPv6 Address
An IPv6 address or network class. The address must be formatted according to RFC 2373 "IPv6
Addressing Architecture," using 8 colon-separated 16-bit hexadecimal values. One double colon
may be used in the address to indicate the appropriate number of zeros required to fill the
undefined fields.
Source/Destination Prefix-Length
A decimal value indicating how many contiguous bits (from the left) of the address comprise the
prefix; i.e., the network portion of the address. (Range: 0-128 bits for the source prefix; 0-8 bits
for the destination prefix)
DSCP
DSCP traffic class. (Range: 0-63)
Source Port
Protocol* source port number. (Range: 0-65535)
* - Includes TCP, UDP or other protocol types.
Source Port Bit Mask
Decimal number representing the port bits to match. (Range: 0-65535)
Destination Port
Protocol destination port number. (Range: 0-65535)
Destination Port Bit Mask
Decimal number representing the port bits to match. (Range: 0-65535)