ZyXEL Communications EMG6765-Q10A, Руководство пользователя

Страница: 135 / 219

Chapter 19 IPv6 Firewall
EMG6765-Q10A User’s Guide
135
The following table describes the labels in this screen.
Table 58 Configuration > Security > IPv6 Firewall
LABEL DESCRIPTION
Enable IPv6 Simple
Security Select this to enable IPv6 Simple Security. IPv6 Simple Security is defined in RFC 6092. This
security discards certain packets (such as packets with multicast source and/or destination
address) to secure local networks and Internet.
Apply Click Apply to save the settings.
ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443.
ICMPv6 has a preceding Next Header value of 58, which is different from the value used to
identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use ICMPv6 to report
errors encountered in packet processing and perform other diagnostic functions, such as
"ping".
Respond to Ping on The EMG6765-Q10A will not respond to any incoming Ping requests when Disable is
selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to
incoming WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and
WAN Ping requests.
Apply Click Apply to save the settings.
Enable Firewall Rule
Enable Firewall Rule Select this check box to activate the firewall rules that you define (see Add Firewall Rule
below).
Apply Click Apply to save the settings.
Add Firewall Rule
Service Name Enter a name that identifies or describes the firewall rule.
MAC Address Enter the MAC address of the computer for which the firewall rule applies.
Dest_IP_Address Enter the IPv6 address of the computer to which traffic for the application or service is
entering.
The EMG6765-Q10A applies the firewall rule to traffic destined for this computer.
Source_IP_Address Enter the IPv6 address of the computer that initializes traffic for the application or service.
The EMG6765-Q10A applies the firewall rule to traffic initiating from this computer.
Protocol Select the protocol ( TCP , UDP or ICMP ) used to transport the packets for which you want to
apply the firewall rule.
Dest Port Range Enter the port number/range of the destination that defines the traffic type, for example
TCP port 80 defines web traffic.
Source Port Range Enter the port number/range of the source that defines the traffic type, for example TCP
port 80 defines web traffic.
Add Rule Click Add Rule to save the firewall rule.
Firewall Rule
# This is your firewall rule number. The ordering of your rules is important as rules are applied in
turn.
ServiceName This is a name that identifies or describes the firewall rule.
MACaddress This is the MAC address of the computer for which the firewall rule applies.
DestIP This is the IP address of the computer to which traffic for the application or service is
entering.
SourceIP This is the IP address of the computer to which traffic for the application or service is
initialized.
Protocol This is the protocol ( TCP , UDP or ICMP ) used to transport the packets for which you want to
apply the firewall rule.
DestPortRange This is the port number/range of the destination that defines the traffic type, for example
TCP port 80 defines web traffic.