ZyXEL Communications Corporation NBG6616 Benutzerhandbuch
Chapter 20 IPv6 Firewall
NBG6616 User’s Guide
145
The following table describes the labels in this screen.
Table 63
Configuration > Security > IPv6 Firewall
LABEL
DESCRIPTION
ICMPv6
Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC
4443. ICMPv6 has a preceding Next Header value of 58, which is different from the
value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use
ICMPv6 to report errors encountered in packet processing and perform other diagnostic
functions, such as "ping".
4443. ICMPv6 has a preceding Next Header value of 58, which is different from the
value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use
ICMPv6 to report errors encountered in packet processing and perform other diagnostic
functions, such as "ping".
Respond to Ping on
The NBG6616 will not respond to any incoming Ping requests when Disable is selected.
Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming
WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and WAN
Ping requests.
Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming
WAN Ping requests. Otherwise select LAN&WAN to reply to all incoming LAN and WAN
Ping requests.
Apply
Click Apply to save the settings.
Enable Firewall Rule
Enable Firewall Rule Select this check box to activate the firewall rules that you define (see Add Firewall
Rule below).
Apply
Click Apply to save the settings.
Add Firewall Rule
Service Name
Enter a name that identifies or describes the firewall rule.
MAC Address
Enter the MAC address of the computer for which the firewall rule applies.
Dest_IP_Address
Enter the IPv6 address of the computer to which traffic for the application or service is
entering.
entering.
The NBG6616 applies the firewall rule to traffic destined for this computer.
Source_IP_Address
Enter the IPv6 address of the computer that initializes traffic for the application or
service.
service.
The NBG6616 applies the firewall rule to traffic initiating from this computer.
Protocol
Select the protocol (TCP, UDP or ICMP) used to transport the packets for which you
want to apply the firewall rule.
want to apply the firewall rule.
Dest Port Range
Enter the port number/range of the destination that defines the traffic type, for
example TCP port 80 defines web traffic.
example TCP port 80 defines web traffic.
Source Port Range
Enter the port number/range of the source that defines the traffic type, for example
TCP port 80 defines web traffic.
TCP port 80 defines web traffic.
Add Rule
Click Add Rule to save the firewall rule.
Firewall Rule
#
This is your firewall rule number. The ordering of your rules is important as rules are
applied in turn.
applied in turn.
ServiceName
This is a name that identifies or describes the firewall rule.
MACaddress
This is the MAC address of the computer for which the firewall rule applies.
DestIP
This is the IP address of the computer to which traffic for the application or service is
entering.
entering.
SourceIP
This is the IP address of the computer to which traffic for the application or service is
initialized.
initialized.
Protocol
This is the protocol (TCP, UDP or ICMP) used to transport the packets for which you
want to apply the firewall rule.
want to apply the firewall rule.
DestPortRange
This is the port number/range of the destination that defines the traffic type, for
example TCP port 80 defines web traffic.
example TCP port 80 defines web traffic.
SourcePortRange
This is the port number/range of the source that defines the traffic type, for example
TCP port 80 defines web traffic.
TCP port 80 defines web traffic.
Action
DROP - Traffic matching the conditions of the firewall rule is stopped.