Motorola WiNG 5.7.1, Справочное руководство системы

Страница: 503 / 1090

6 - 33
16. Click the OK button to save all changes made to the IPv6 Firewall Rules dialog. Click Exit to close the dialog and return
to the previous screen.
17. Select existing inbound or outbound MAC Firewall Rules using the drop-down menu. If no rules exist, select Create to
display a screen where Firewall rules can be created.
18. Select the + Add Row button.
19. Select the added row to expand it into configurable parameters.
Destination Select the destination IPv6 address or network group configuration used as a basis
matching criteria for this IPv6 ACL rule. Destination options include:
• Any – Indicates any host device in any IPv6 network.
• Network – Indicates all hosts in a particular IPv6 network. Subnet mask information
has to be provided for filtering based on network.
• Host – Indicates a single host with a specific IPv6 address.
Source Port If using either tcp or udp as the protocol, define whether the source port for incoming IPv6
ACL rule application is any , equals or an administrator defined range . If not using tcp or
udp, this setting displays as N/A. This is the data local origination virtual port designated
by the administrator. Selecting equals invokes a spinner control for setting a single
numeric port. Selecting range displays spinner controls for
Low and High numeric range
settings. A source port cannot be a destination port.
Destination Port If using either tcp or udp as the protocol, define whether the destination port for incoming
IPv6 ACL rule application is any , equals or an administrator defined range . If not using tcp
or udp, this setting displays as N/A. This is the data local origination virtual port
designated by the administrator. Selecting equals invokes a spinner control for setting a
single numeric port. Selecting range displays spinner controls for
Low and High numeric
range settings.
ICMP Type Selecting ICMP as the protocol for the IPv6 rule displays an additional set of ICMP specific
options for ICMP type and code. The Internet Control Message Protocol (ICMP) uses
messages identified by numeric type . ICMP messages are used for packet flow control or
generated in IP error responses. ICMP errors are directed to the source IP address of the
originating packet. Assign an ICMP type from 1-10.
ICMP Code Selecting ICMP as the protocol for the IPv6 rule displays an additional set of ICMP specific
options for ICMP type and code. Many ICMP types have a corresponding code , helpful for
troubleshooting network issues (0 - Net Unreachable, 1- Host Unreachable, 2 - Protocol
Unreachable etc.).
Protocol Select the protocol to filter for this IPv6 ACL. Use the drop down to select from a list of
predefined protocol or use the spinner control to set a particular protocol number.
Mark Select this option to mark certain fields inside a packet before allowing them. Mark is only
applicable for
Allow rules. Mark sets the rule’s 802.1p or dscp level (from 0 - 7)
Log Select this option to create a log entry that a firewall rule has allowed a packet to be
either denied or allowed.
Description Lists the administrator assigned description applied to the IPv6 ACL rule. Select a
description within the table to modify its character string as filtering changes warrant.
Select the icon within the Description table header to launch a
Select Columns screen
used to add or remove IPv6 ACL criteria from the table.