| getnsacl6Result Structure Definition |
The getnsacl6Result structure defines the return type for getnsacl6 API. |
Syntax |
Members |
rc |
If the method succeeds, rc is 0 else rc > 0. Values above 0x8000 indicate Warnings. |
message |
If the method succeeds, message is NULL else message contains Error/Warning message. |
nsacl6List |
List of nsacl6s |
| nsacl6 Structure Definition |
The nsacl6 structure defines the actual return type values for getnsacl6 API. |
Syntax |
Members |
acl6name |
Name of the ACL6 rule whose details you want the Citrix ADC to display. |
type |
default will display both CLASSIC and DFD |
acl6action |
Action to perform on the incoming IPv6 packets that match the ACL6 rule.
Available settings function as follows:
* ALLOW - The Citrix ADC processes the packet.
* BRIDGE - The Citrix ADC bridges the packet to the destination without processing it.
* DENY - The Citrix ADC drops the packet. |
srcmac |
MAC address to match against the source MAC address of an incoming IPv6 packet. |
srcmacmask |
Used to define range of Source MAC address. It takes string of 0 and 1, 0s are for exact match and 1s for wildcard. For matching first 3 bytes of MAC address, srcMacMask value "000000111111". |
protocol |
Protocol number in IPv6 header or name. |
protocolnumber |
Protocol number in IPv6 header or name. |
srcportval |
Source port (range). |
operatoR |
Either the equals (=) or does not equal (!=) logical operator. |
destportval |
Destination port (range). |
operatoR2 |
Either the equals (=) or does not equal (!=) logical operator. |
srcipv6val |
Source IPv6 address (range). |
operatoR3 |
Either the equals (=) or does not equal (!=) logical operator. |
destipv6val |
Destination IPv6 address (range). |
operatoR4 |
Either the equals (=) or does not equal (!=) logical operator. |
vlan |
ID of the VLAN. The Citrix ADC applies the ACL6 rule only to the incoming packets on the specified VLAN. If you do not specify a VLAN ID, the appliance applies the ACL6 rule to the incoming packets on all VLANs. |
vxlan |
ID of the VXLAN. The Citrix ADC applies the ACL6 rule only to the incoming packets on the specified VXLAN. If you do not specify a VXLAN ID, the appliance applies the ACL6 rule to the incoming packets on all VXLANs. |
state |
State of the ACL6. |
kernelstate |
Commit status of the ACL6. |
ttl |
Time left to expire ACL6 (in seconds). |
icmptype |
ICMP Message type to match against the message type of an incoming IPv6 ICMP packet. For example, to block DESTINATION UNREACHABLE messages, you must specify 3 as the ICMP type.
Note: This parameter can be specified only for the ICMP protocol. |
icmpcode |
Code of a particular ICMP message type to match against the ICMP code of an incoming IPv6 ICMP packet. For example, to block DESTINATION HOST UNREACHABLE messages, specify 3 as the ICMP type and 1 as the ICMP code.
If you set this parameter, you must set the ICMP Type parameter. |
interfacE |
ID of an interface. The Citrix ADC applies the ACL6 rule only to the incoming packets from the specified interface. If you do not specify any value, the appliance applies the ACL6 rule to the incoming packets from all interfaces. |
hits |
Number of hits of this ACL6. |
priority |
Priority for the ACL6 rule, which determines the order in which it is evaluated relative to the other ACL6 rules. If you do not specify priorities while creating ACL6 rules, the ACL6 rules are evaluated in the order in which they are created. |
logstate |
Enable or disable logging of events related to the ACL6 rule. The log messages are stored in the configured syslog or auditlog server. |
ratelimit |
Packet rate limit for acl logging |
aclassociate |
ACL6 linked |
dfdhash |
Specifies the type of hashmethod to be applied, to steer the packet to the FP of the packet. |
dfdprefix |
hashprefix to be applied to SIP/DIP to generate rsshash FP.eg 128 => hash calculated on the complete IP |
nodeid |
Specifies the NodeId to steer the packet to the provided FP. |
stateful |
If stateful option is enabled, transparent sessions are created for the traffic hitting this ACL6 and not hitting any other features like LB, INAT etc. |
_nextgenapiresource |
See Also |