Dell POWEREDGE M1000E User Manual

Page 283

Advertising
background image

Configuring Switching Information

281

Mirror Interface — Specifies the egress interface where the matching traffic stream is copied, in

addition to it being forwarded normally by the device. This field cannot be set if a Redirect Interface is

already configured for the ACL rule.

Logging — When set to True, logging is enabled for this ACL rule (subject to resource availability in

the device). If the Access List Trap Flag is also enabled, this will cause periodic traps to be generated

indicating the number of times this rule was activated during the current report interval. A fixed 5

minute report interval is used for the entire system. A trap is not issued if the ACL rule hit count is

zero for the current interval. This field is visible for a Deny action.

Match Every — Select True or False from the menu.

• True signifies that all packets will match the selected IPv6 ACL and rule and will be either permitted or

denied. In this case, since all packets match the rule, the option of configuring other match criteria will

not be offered. To configure specific match criteria for the rule, remove the rule and re-create it, or re-

configure 'Match Every' to 'False' for the other match criteria to be visible.

Protocol — There are two ways to configure IPv6 protocol.

Specify an integer ranging from 1 to 255 after selecting protocol keyword “other”. This number

represents the IP protocol.

Select name of a protocol from the existing list of Internet Protocol (IP), Transmission Control

Protocol (TCP), User Datagram Protocol (UDP), Internet Control Message Protocol (ICMP) and

Internet Group Management Protocol (IGMP).

Source Prefix/PrefixLength — Specify IPv6 Prefix combined with IPv6 Prefix length of the network or

host from which the packet is being sent. Prefix length can be in the range (0 to 128).

Source L4 Port — Specify a packet's source layer 4 port as a match condition for the selected IPv6 ACL

rule. Source port information is optional. Source port information can be specified in two ways:

Select keyword “other” from the drop down menu and specify the number of the port in the range

from 0 to 65535.

Select one of the keyword from the list: DOMAIN, ECHO, FTP, FTPDATA, HTTP, SMTP, SNMP,

TELNET, TFTP, and WWW. Each of these values translates into its equivalent port number,

which is used as both the start and end of the port range.

Destination Prefix/Prefix Length — Enter up to a 128-bit prefix combined with the prefix length to be

compared to a packet's destination IP address as a match criteria for the selected IPv6 ACL rule. The

prefix length can be in the range 0 to 128.

Destination L4 Port Number — Specify a packet's destination layer 4 port number match condition

for the selected IPv6 ACL rule. This is an optional configuration.

Destination L4 Port Keyword — Specify the destination layer 4 port match conditions for the selected

IPv6 ACL rule. The possible values are DOMAIN, ECHO, FTP, FTPDATA, HTTP, SMTP, SNMP,

TELNET, TFTP, and WWW. Each of these values translates into its equivalent port number, which is

used as both the start and end of the port range. This is an optional configuration.

Flow Label — A 20-bit number that is unique to an IPv6 packet that is used by end stations to signify

QoS handling in routers. The flow label can specified within the range 0 to 1048575.

Advertising