Filter
Top Products
Configuring Switching Information 281
•
Mirror Interface
— Specifies the egress interface where the matching traffic stream is copied, in
addition to it being forwarded normally by the device. This field cannot be set if a Redirect Interface is
already configured for the ACL rule.
•
Logging
— When set to True, logging is enabled for this ACL rule (subject to resource availability in
the device). If the Access List Trap Flag is also enabled, this will cause periodic traps to be generated
indicating the number of times this rule was activated during the current report interval. A fixed 5
minute report interval is used for the entire system. A trap is not issued if the ACL rule hit count is
zero for the current interval. This field is visible for a Deny action.
•
Match Every
— Select True or False from the menu.
• True signifies that all packets will match the selected IPv6 ACL and rule and will be either permitted or
denied. In this case, since all packets match the rule, the option of configuring other match criteria will
not be offered. To configure specific match criteria for the rule, remove the rule and re-create it, or re-
configure 'Match Every' to 'False' for the other match criteria to be visible.
•
Protocol
— There are two ways to configure IPv6 protocol.
– Specify an integer ranging from 1 to 255 after selecting protocol keyword “other”. This number
represents the IP protocol.
– Select name of a protocol from the existing list of Internet Protocol (IP), Transmission Control
Protocol (TCP), User Datagram Protocol (UDP), Internet Control Message Protocol (ICMP) and
Internet Group Management Protocol (IGMP).
•
Source Prefix/PrefixLength
— Specify IPv6 Prefix combined with IPv6 Prefix length of the network or
host from which the packet is being sent. Prefix length can be in the range (0 to 128).
•
Source L4 Port
— Specify a packet's source layer 4 port as a match condition for the selected IPv6 ACL
rule. Source port information is optional. Source port information can be specified in two ways:
– Select keyword “other” from the drop down menu and specify the number of the port in the range
from 0 to 65535.
– Select one of the keyword from the list: DOMAIN, ECHO, FTP, FTPDATA, HTTP, SMTP, SNMP,
TELNET, TFTP, and WWW. Each of these values translates into its equivalent port number,
which is used as both the start and end of the port range.
•
Destination Prefix/Prefix Length
— Enter up to a 128-bit prefix combined with the prefix length to be
compared to a packet's destination IP address as a match criteria for the selected IPv6 ACL rule. The
prefix length can be in the range 0 to 128.
•
Destination L4 Port Number
— Specify a packet's destination layer 4 port number match condition
for the selected IPv6 ACL rule. This is an optional configuration.
•
Destination L4 Port Keyword
— Specify the destination layer 4 port match conditions for the selected
IPv6 ACL rule. The possible values are DOMAIN, ECHO, FTP, FTPDATA, HTTP, SMTP, SNMP,
TELNET, TFTP, and WWW. Each of these values translates into its equivalent port number, which is
used as both the start and end of the port range. This is an optional configuration.
•
Flow Label
— A 20-bit number that is unique to an IPv6 packet that is used by end stations to signify
QoS handling in routers. The flow label can specified within the range 0 to 1048575.