| Dialog box element | Description |
|---|---|
|
Only for the following traffic |
Specifies that a demand-dial connection is initiated only when IP packets forwarded to this demand-dial interface match one of the listed filters. When the demand-dial interface is in a disconnected state, all packets forwarded to the demand-dial interface are compared to the listed filters. If a packet matches any of the filters, the demand-dial connection is initiated and the packet is forwarded across the demand-dial connection. If the packet does not match any of the filters, the demand-dial connection is not initiated and the packet is discarded. This option applies to all the filters that you have added. You cannot change this option for individual filters. You can only configure this option after you have added at least one filter. |
|
For all traffic except |
Specifies that a demand-dial connection is not initiated for IP packets forwarded to this demand-dial interface that match one of the listed filters. When the demand-dial interface is in a disconnected state, all packets forwarded to the demand-dial interface are compared to the listed filters. If the packet matches any of the filters, the demand-dial connection is not initiated and the packet is discarded. If a packet does not match any of the filters, the demand-dial connection is initiated and the packet is forwarded across the demand-dial connection. This option applies to all the filters that you have added. You cannot change this option for individual filters. You can only configure this option after you have added at least one filter. |
|
New |
Click to add a filter. You can set filters based on where the packet is coming from (the source), where the packet is going (the destination), or which protocol the packet is using. You can set all three of these values for a filter or set any one or combination of the three, depending on the level of control that you want. For more information, see Add or Edit IPv6 Filter. |
|
Edit |
Click to modify the settings for a selected filter. For more information, see Add or Edit IPv6 Filter. |
|
Delete |
Removes a selected filter from the list. |
Add or Edit IPv6 Filter
| Dialog box element | Description |
|---|---|
|
Source network |
Specifies whether the filter checks the network address from which the packet is coming. After selecting this check box, you must specify an Internet Protocol version 6 (IPv6) network address and prefix length. |
|
Destination network |
Specifies whether the filter checks the network to which the packet is going. After selecting this check box, you must specify an IPv6 network address and prefix length. |
|
IPv6 address |
Type the IPv6 address of the network from which the packet was sent or to which the packet is going. |
|
Prefix length |
Type the prefix length. The prefix is the part of the address that indicates the network identifier and is typically 64. |
|
Protocol |
Lists the available protocol types that you can base a filter on. The default is Any protocol. If you select Other, you must type a protocol identifier in Protocol number. |
|
Source port |
For TCP, TCP (established), and UDP, type the port number specified by the source to be used by the filter. Some applications use well-known ports to send and receive packets. You can set a filter for one of these ports if you know which numbers the application uses for the protocol specified in Protocol. For example, you can try to block FTP traffic or allow only PPTP traffic. |
|
Destination port |
For TCP, TCP (established), and UDP, type the port number used by the destination for the packet. |
|
ICMP type |
For ICMP, type the ICMP type. |
|
ICMP code |
For ICMP, type the ICMP code. |
|
Protocol number |
For the Other protocol, type the IP protocol number. |