Netgear GS516TP Software Administration Manual - Page 145

GS516TP Gigabit Smart Switches • The number of the rules associated with the IP ACL is displayed in the Rules field. • The ACL type is IPv6 ACL and is displayed in the Type field. 3. Click ADD. To delete an IPv6 ACL, select the check box associated with the rule and click DELETE. IPv6 Rules Use the IPv6 Rules screen to configure the rules for the IPv6 access control lists. The IPv6 access control lists are created using the IPv6 ACL screen. By default, no specific value is in effect for any of the IPv6 ACL rules.  To add an IPv6 rule: 1. Select Security > ACL > Advanced > IPv6 Rules link. 2. From the pull-down list in the ACL Name field, select the IP ACL for which to create or update a rule. 3. Configure the settings for the new rule. • Rule ID. Enter a whole number in the range of 1-10 that is used to identify the rule. An IPv6 ACL might have up to 10 rules. • Action. Specify what action must be taken if a packet matches the rule's criteria. The choices are Permit or Deny. • Logging. When set to Enable, logging is enabled for this ACL rule (subject to resource availability in the device). If the access list trap flag is also enabled, this causes periodic traps to be generated indicating the number of times this rule was hit during the current report interval. A fixed 5-minute report interval is used for the entire system. A trap is not issued if the ACL rule hit count is 0 for the current interval. This field is visible for a deny action. • Match Every. Select Enable or Disable. Enable signifies that all packets that match the selected IPv6 ACL and rule are either permitted or denied. In this case, since all packets match the rule, the option of configuring other match criteria is not offered. To configure specific match criteria for the rule, remove the rule and recreate it, or for Match Every select Disable for the other match criteria to be visible. • Protocol. There are two ways to configure IPv6 protocol: • After selecting protocol keyword other, specify an integer ranging from 0 to 255. This number represents the IPv6 protocol. • Select name of a protocol from the existing list of IPv6, ICMPv6, TCP, and UDP. • Source Prefix and Prefix Length. Specify the IPv6 Prefix combined with IPv6 Prefix length of the network or host from which the packet is being sent. The valid range for the prefix length is 0-128. • Source L4 Port. Specify a packet's source layer 4 port as a match condition for the selected IPv6 ACL rule. Source port information is optional. Source port information can be specified in two ways: • Select keyword other from the drop-down list, and specify the number of the port. The valid range is 0 - 65535. 145