Determines the station type. Your selection determines which of the following table columns (>Local-network, Remote-peer/local-host and Address/Prefix) must be filled out.
- SNMP ID:
- 2.70.5.9.2
- Console path:
- Setup > IPv6 > Firewall > Stations
- Possible values:
- Local-network
- Name of a local network, e.g. INTRANET.
- Only the column Local-network has to be filled out.
- If it contains an interface name, then the station consists of all networks on this interface.
- If you specify a network group, then the station consists of all prefixes under Addresses with this group.
- Remote-peer
- Name of a WAN remote site, e.g. INTERNET.
- Only the column Remote-peer/local-host has to be filled out.
- It can contain a WAN interface or a RAS template. With a WAN interface it resolves to all prefixes/networks to which a route exists via this WAN interface, and with a RAS template it resolves to all prefixes/networks to which a route exists via a RAS interface from this template.
- Prefix
- IPv6 prefix
- Only the column Address/Prefix has to be filled out.
- It contains an IPv6 prefix, e.g. "2001:db8::/32".
- Identifier
- The columns Local-network and Address/Prefix both have to be filled out
- Local-network contains a WAN interface or a RAS template.
- Address/Prefix contains an IPv6 identifier. These are the last 64 bits of the IPv6 address of an IPv6 host, e.g. "::2a0:57ff:fe1b:3a6a". The value must contain two leading colons.
- This identifier forms an address when combined with the networks of the interface under Local-network or with the RAS interface from the specified template.
- Furthermore, a link-local address with this identifier is formed for each of these interfaces.
- IP-Address
- Only the column Address/Prefix has to be filled out.
- It contains an IPv6 address, e.g. "2001:db8::/1".
- Named-host
- Name of a local IPv6 host or local station.
- The column Remote-peer/local-host must be filled out and contains a hostname.
- The column Local-network is optional and can include a LAN interface.
- The host name is resolved to a host address using the DHCPv6 server or the DNS server in the device.
- If an interface has been specified, the address is only taken if it can be reached via this interface.
- MAC-Address
- This allows rules to be created for resources on the internal network that are identified by their MAC address. In dual-stack networks, this helps with the correlation to IPv4 station objects that are also handled by an IPv4 rule based on their MAC address.
- The column Local-network is optional and can contain the name of a network where the station object is located.
- The column Address/Prefix contains the MAC address used to identify the object.
Note: In rules, MAC addresses can be a source but not a target. - Delegated-prefix
- Especially where the provider prefix is dynamic, this allows a rule to be defined for downstream routers or resources.
- The Local-network column is optional and can contain the name of a network where the station object is located. This can be used as a restriction on the local network.
- The column Remote-peer/local-host is required and should contain the remote peer from which the delegated prefix is obtained or derived.
- The column Address/Prefix contains a prefix or address that is linked (OR operator) with the prefix obtained from the provider. If the object should refer to the entire prefix, you can either configure ::/0 or the entry can be left blank.
Example: The provider delegates the prefix 2001:db8:1234::/48 to the remote peer INTERNET.
- To use the subnet abcd, the Address/Prefix has to be configured as the value 0:0:0:abcd::/48.
- If the address to be used is 2001:db8:0:23::dead:beef/128, then the Address/Prefix can be configured as 0:0:0:23::dead:beef/128.
- If the entire prefix is to be used, then the Address/Prefix can be configured as ::/0 or the entry can be left blank.
- Default:
- Local-network
