Skip to content
Any configuration changes made locally on the switch won't be synchronized with Sophos Central. We recommend making changes from the Sophos Central control panel instead.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/switch/help/en-us/index.html?contextId=user-guide-features-configure-access-control-IPv6-ACE

IPv6 ACE

Allows IPv6-Based Access Control Entry (ACE) to be defined within a configured ACL.

Option Description
ACL Name Select the ACL from the list.
Sequence Enter the sequence number that signifies the specified ACL's order relative to other ACLs assigned to the selected interface. The valid range is from 1 to 2147483647, 1 being processed first.
Action Select what action is taken if a packet matches the criteria.
Permit: Forward packets that meet the ACL.
Deny: Drops packets that meet the ACL
Protocol Select the Any, Protocol ID, or select from list from the drop-down menu.
Protocol ID: Enter the protocol in the ACE to which the packet is matched.
Select from List: Select the protocol from the list in the provided field.
Source IP Address Value Enter the source IP address.
Source IP Prefix Length Enter the prefix length of the new source IP address. The range is from 0 to 128.
Destination IP Address Value Enter the destination IP address.
Destination IP Prefix Length Enter the prefix length of the new source IP address. The range is from 0 to 128.
Source Port Select Single or Range from the list. Enter the source port that is matched to packets. The range is from 0 to 65535.
Destination Port Select Single or Range from the list. Enter the destination port that is matched to packets. The range is from 0 to 65535.
TCP Flags Select whether to handle each six TCP control flags; URG (Urgent), ACK (Acknowledgment), PSH (Push), RST (Reset), SYN (Synchronize), and FIN (Fin) from the drop-down menu.
Don't Care: The ACE doesn't treat the TCP control flag.
Set: The packet with the TCP control flag being set matches the criteria.
Unset: The packet with the TCP control flag being unset matches the criteria.
Type of Service Select Any or DSCP to match from the drop-down list. When DSCP to match is selected, enter the DSCP. The range is from 0 to 63.

Click Apply to update the system settings.