Chapter4ServiceConguration
Syntax
rule<1-500>{permit|deny}ipv6udp{<source-ipv6addr><sipv6-mask>|any}[[source-port<0
-65535><sport-mask>]{<destination-ipv6addr><dipv6-mask>|any}[dest-port<0-65535><dpor
t-mask>][<vlan-id>]]
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
ipv6udp
ThisruleisonlyvalidforIPv6UDPpacket.Otherpacketsignore
thisrule.
<source-ipv6addr>
IPv6Sourcenetworkorhostofthetransmittedpackage.The
standardIPv6addressformatisused,suchasabcd:EF12::1234.
<sipv6-mask>
Sourcemaskandusedforsource.Itisexpressedbyaninteger.
Therangeis1to128.
any
MatchesallsourceIPv6addresses,sourceandsourcemaskare
all0s.
source-port<0-65535>
TCPsourceportnumberofthetransmittedpacket
Thesource-portparameterresolvesomeknownportnumber.
Alsotheportnumberandmaskcanbeentered.
<sport-mask>Sourceportmask.
<destination-ipv6addr>
ThedestinationnetworkorhostaddressofthetransmittedIPv6
packet.ThestandardIPv6addressformatisused,suchas
abcd:EF12::1234
<dipv6-mask>
Destinationmask.Itisusedfordestinationandrepresentedby
oneinteger.Thevaluerangeis1to128.
any
MatchesalldestinationIPv6addresses.Thedestinationand
destinationmaskareall0s.
dest-port<0-65535>
TCPdestinationportnumberofthetransmittedpacket
Thedest-portparameterresolvesomeknownportnumber.Also
theportnumberandmaskcanbeentered.
<dport-mask>Destinationportmask.
<vlan-id>
ThisruleisonlyvalidformessageswiththespeciedVLANID.
Ignorethisruleforothermessages.TheruleofVLANIDis1
to4094.
4-285
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential