Defines an IPv6 Access Control Rule managed object.
REST API Methods for this Resource
- GET ipv6acltable id - ipv6aclrule
- GET ipv6acltable id - ipv6aclrule id
- POST ipv6acltable id - ipv6aclrule id
- PUT ipv6acltable id - ipv6aclrule id
- DELETE ipv6acltable id - ipv6aclrule id
Resource Schema
Configuration
| Parameter Name | Required | Service Affecting | Data Type | Default Value | Possible Values | Description |
|---|---|---|---|---|---|---|
| Description | No | No | string | none | 64 - Max Length | Assigns an operator-friendly description text which can be used for future reference. Whitespaces are allowed. |
| aclAction | Yes | Yes | Enum | 1 | Possible values:
| Specifies the action taken by this rule if there is a match. |
| ipAddressingMode | No | Yes | Enum | 0 | Possible values:
| Specifies the address mode for source IP/Mask and destination IP/Mask address. Note only IPv4 and IPv6 are valid. |
| srcIPAddr | Yes | Yes | string | none | 45 - Max Length | Specifies the source IP address of the rule to be matched against the packet received. |
| srcIPAddrMask | Yes | Yes | string | none | 45 - Max Length | Specifies the netmask of the source IP address. |
| destIPAddr | Yes | Yes | string | none | 45 - Max Length | Specifies the destination IP address of the rule to be matched against the packet received. |
| destIPAddrMask | Yes | Yes | string | none | 45 - Max Length | Specifies the netmask of the destination IP address. |
| aclProtocol | Yes | Yes | int | Possible values:
| Specifies the protocol of the packet being matched against. Value of 256 will match all protocols. | |
| aclMinSrcPort | Yes | Yes | int | Possible values:
| Specifies the minimum source port number to be matched against the packet which also includes the value specified. This is applicable only for SBC 1000/2000 platforms. | |
| aclMaxSrcPort | Yes | Yes | int | Possible values:
| Specifies the maximum source port number to be matched against the packet which also includes the value specified. This is applicable only for SBC 1000/2000 platforms. | |
| aclSrcPort | Yes | Yes | int | Possible values:
| Specifies the source port number to be matched against the packet which also includes the value specified. This is applicable only for SWe Lite system. | |
| aclMinDstPort | Yes | Yes | int | Possible values:
| Specifies the minimum destination port number to be matched against the packet which also includes the value specified. This is applicable only for SBC 1000/2000 platforms. | |
| aclMaxDstPort | Yes | Yes | int | Possible values:
| Specifies the maximum destination port number to be matched against the packet which also includes the value specified. This is applicable only for SBC 1000/2000 platforms. | |
| aclDstPort | Yes | Yes | int | Possible values:
| Specifies the destination port number to be matched against the packet which also includes the value specified. This is applicable only for SWe Lite system. | |
| ifName | Yes | Yes | string | none | 64 - Max Length | Specifies the name of the vSBC logical interface connected to the external network. Any of the Admin(mgt0) or Ethernet(Ethernet 1, Ethernet 2, Ethernet 3, Ethernet 4) interfaces can be used. Field left blank indicates the default setting is for any interfaces. This is applicable only for SWe Lite system. |
| aclPrecedence | Yes | Yes | int | 1 | Possible values:
| Specifies the rule precedence to control which ACL rule is applied when multiple rules match a given packet. If an incoming packet matches multiple rules, the IP ACL rule with the highest precedence(lowest numerical precedence value) is applied to that packet. Each IP ACL rule must define an unique precedence value. This is applicable only for SWe Lite system. |
| aclBucketSize | Yes | Yes | int | Possible values:
| Specifies the credit balance that should be consumed before the packets are discarded. The consumed credits resides in the buckets and gets reduced for every packet received on the Network Interface. If a packet is received when the credit balance is less than the size of the packet, the packet is discarded. Default value '0' represents unlimited continuous policing. This is applicable only for SWe Lite system. | |
| aclFillRate | Yes | Yes | int | Possible values:
| Specifies the number of packets to add to the bucket credit balance(in packets/second). If a packet is received at a rate exceeding this fill rate, it is discarded. The bucket credit balance is always less than the configured bucket size regardless of the size of this increment. Default value '0' represents unlimited which passes packets unconditionally. This is applicable only for SWe Lite system. | |
| ribbonProtectBadActor | No | No | Enum | 0 | Possible values:
| Represents if the ACL Rule is added through Ribbon Protect. Applicable only for a SWe Lite System. |
Overview
Content Tools