IPv6 Firewall Filters Configuration Page Options

IPv6 Filter Summary

Filter Name

Displays the name of the filter and, when expanded, lists the terms attached to the filter.

Displays the match conditions and actions that are set for each term.

Allows you to add more terms to a filter or to modify filter terms.

The options available are:

• To display the terms added to a filter—Click the plus sign next to the filter name. This also displays the match conditions and actions set for the term.
• To edit a filter—Click the filter name. To edit a term, click the name of the term.

Select an option.

Filter Name

Searches for existing filters by filter name.

The options available are:

• To find a specific filter—Enter the name of the filter in the Filter Name box.
• To list all filters with a common prefix or suffix—Use the wildcard character (*) when you enter the name of the filter. For example, te* lists all filters with a name starting with the characters te.

Select an option.

Number of Items to Display

Specifies the number of filters or terms to display on one page. Selects the number of items to be displayed on one page.

Select a number from the list.

Name

Positions the new filter in one of the following locations:

• After Final IPv4 Filter—At the end of all filters.
• After IPv6 Filter—After a specified filter.

  Before IPv6 Filter—Before a specified filter.

Select an option.

Add

Opens the Filter Term page, allowing you to define the match conditions and the action for this term.

Click Add.

Source Address

Specifies IP source addresses to be included in, or excluded from, the match condition. Allows you to remove source IP addresses from the match condition.

If you have more than 25 addresses, this field displays a link that allows you to easily scroll through pages, change the order of addresses, and also search for them.

The options available are:

• Add—To include the address in the match condition.
• Except —To exclude the address from the match condition and then select Add -To include the address in the match condition.
• Delete—To remove an IP source address from the match condition.

Enter an IP source address and prefix length, and select an option.

Source Port

Specifies the source port type to be included in, or excluded from, the match condition. Allows you to remove a source port type from the match condition.

Note: This match condition does not check the protocol type being used on the port. Make sure to specify the protocol type (TCP or UDP) match condition in the same term.

The options available are:

• Add—To include the port in the match condition.
• Except—To exclude the port from the match condition and then select Add—To include the port in the match condition.
• Delete—To remove a port type from the match condition.

Select the port from the port name list; enter the port name, number, or range; and then select an option.

Destination Address

Specifies destination addresses to be included in, or excluded from, the match condition. Allows you to remove a destination IP address from the match condition.

If you have more than 25 addresses, this field displays a link that allows you to easily scroll through pages, change the order of addresses, and search for them.

The options available are:

• Add—To include the address in the match condition.
• Except —To exclude the address from the match condition and then select Add—To include the address in the match condition.
• Delete—To remove an IP address from the match condition.

Enter an IP destination address and prefix length, and select an option.

Destination Port

Specifies destination port types to be included in, or excluded from, the match condition. Allows you to remove a destination port type from the match condition.

Note: This match condition does not check the protocol type being used on the port. Make sure to specify the protocol type (TCP or UDP) match condition in the same term.

The options available are:

• Add—To include the port in the match condition.
• Except—To exclude the port from the match condition and then select Add—To include the port in the match condition.
• Delete—To remove a port type from the match condition.

Select the port from the port name list; enter the port name, number, or range; and then select an option.

Address

Specifies IP addresses to be included in, or excluded from, the match condition for a source or destination. Allows you to remove an IP address from the match condition.

If you have more than 25 addresses, this field displays a link that allows you to easily scroll through pages, change the order of addresses and also search for them.

Note: This address match condition cannot be specified in conjunction with the source address or destination address match conditions in the same term.

The options available are:

• Add—To include the address in the match condition.
• Except—To exclude the address from the match condition and then select Add—To include the address in the match condition.
• Delete—To remove an IP address from the match condition.

Enter an IP destination address and prefix length and select an option.

Port

Specifies a port type to be included in, or excluded from, a match condition for a source or destination. Allows you to remove a destination port type from the match condition.

Note: This match condition does not check the protocol type being used on the port. Make sure to specify the protocol type (TCP or UDP) match condition in the same term.

Also, this port match condition cannot be specified in conjunction with the source port or destination port match conditions in the same term.

The options available are:

• Add—To include the port in the match condition.
• Except—To exclude the port from the match condition and then select Add—To include the port in the match condition.
• Delete—To remove a port type from the match condition.

Select the port from the port name list; enter the port name, number, or range; and then select an option.

Interface

Specifies interfaces to be included in a match condition. Allows you to remove an interface from the match condition.

The options available are:

• Add—To include an interface in a match condition.
• Delete—To remove an interface from the match condition.

Select a name from the interface name , or enter the interface name, and select an option.

Interface Group

Specifies interface groups, which you have already defined, to be included in, or excluded from, a match condition. Allows you to remove an interface group from the match condition.

The options available are:

• Add—To include the port in the match condition.
• Except—To exclude the port from the match condition and then select Add—To include the port in the match condition.
• Delete—To remove a port type from the match condition.

Enter the name of the group and select an option.

TCP Established

Matches all Transmission Control Protocol packets other than the first packet of a connection.

Note: This match condition does not verify that the TCP is used on the port. Make sure to specify the TCP as a match condition in the same term.

Select the check box.

TCP Flags

Specifies Transmission Control Protocol flags to be included in the match condition.

Note: This match condition does not verify that the TCP is used on the port. Make sure to specify the TCP as a match condition in the same term.

Enter a text or numeric string defining the flag.

Next Header

Specifies IPv6 protocol types to be included in, or excluded from, the match condition. Allows you to remove an IPv6 protocol type from the match condition.

• Add—To include the protocol in the match condition.
• Except—To exclude the protocol from the match condition and then select Add—To include the protocol in the match condition.
• Delete—To remove an IPv6 protocol type from the match condition.

Select a protocol name from the list or enter the protocol name number, and select an option.

Traffic Class

Specifies the traffic class to be included in, or excluded from, the match condition. Allows you to remove a traffic class value from the match condition.

The options available are:

• Add—To include the traffic class in the match condition.
• Except—To exclude the traffic class from the match condition and then select Add—To include the traffic class in the match condition.
• Delete—To remove a traffic class value from the match condition.

Select a traffic class from the list or enter the traffic class as text number or a length by entering a value or range, and select an option.

Forwarding Class

Specifies forwarding classes to be included in, or excluded from, the match condition. Allows you to a remove forwarding class entry from the match condition.

The options available are:

• Add—To include the forwarding class in the match condition.
• Except—To exclude the forwarding class from the match condition and then select Add—To include the forwarding class in the match condition.
• Delete—To remove a forwarding class from the match condition.

Specify a forwarding class by selecting a forwarding class from the list or entering a forward class, and then select an option.

Nothing

Specifies that no action is performed. By default, a packet is accepted if it meets the match conditions of the term, and packets that do not match any conditions in the firewall filter are dropped.

Select Nothing.

Discard

Discards a packet that meets the match conditions of the term. Names a discard collector for packets.

Select Discard.

Next Term

Evaluates a packet with the next term in the filter if the packet meets the match conditions in this term. This action makes sure that the next term is used for evaluation even when the packet matches the conditions of a term. When this action is not specified, the filter stops evaluating the packet after it matches the conditions of a term, and takes the associated action.

Select Next Term.

Load Balance

Specifies a load-balance group, which you have already defined, to be used by packets that meet the match conditions. A load-balance group contains interfaces that use the same next-hop group to balance the traffic load.

Select Load Balance and enter the group name in the box next to Load Balance.

Forwarding Class

Classifies the packet as a specific forwarding class.

Select Forwarding Class from the list.

Log

Logs the packet header information in the routing engine.

Select Log.

Loss Priority

Sets the loss priority of the packet. This is the priority of dropping a packet before it is sent, and it affects the scheduling priority of the packet.

Select Loss Priority from the list.