4-12
[AP-behavior-access2] filter deny
[AP-behavior-access2] qos policy access
[AP-qospolicy-access] classifier access1 behavior access1
[AP-qospolicy-access] classifier access2 behavior access2
[AP-qospolicy-access] interface wlan-bss1
[AP-WLAN-BSS1] qos apply policy access inbound
IPv6 ACL Configuration Example
Network Requirements
Perform packet filtering in the inbound direction of interface WLAN-BSS 1 to deny all IPv6 packets but
those with source addresses in the range 4050::9000 to 4050::90FF.
Configuration Procedure
1) Create an ACL that is to be applied to interface WLAN-BSS 1.
# Create a basic IPv6 ACL numbered 2000, and enter its view.
<AP> system-view
[AP] acl ipv6 number 2000
# Create a rule to allow access from IPv6 address 4050::9000 to 4050::90FF.
[AP-acl6-basic-2000] rule 1 permit source 4050::9000/120
[AP-acl6-basic-2000] quit
# Create a basic IPv6 ACL numbered 2001, and enter its view.
[AP] acl ipv6 number 2001
# Create a rule to deny access from other IPv6 addresses.
[AP-acl6-basic-2001] rule 1 deny source any
[AP-acl6-basic-2001] quit
2) Apply the ACLs
# Apply ACL 2000 and ACL 2001.
[AP] traffic classifier access1
[AP-classifier-access1] if-match acl ipv6 2000
[AP-classifier-access1] quit
[AP] traffic behavior access1
[AP-behavior-access1] filter permit
[AP] traffic classifier access2
[AP-classifier-access2] if-match acl ipv6 2001
[AP-classifier-access2] quit
[AP] traffic behavior access2
[AP-behavior-access2] filter deny
[AP-behavior-access2] qos policy access
[AP-qospolicy-access] classifier access1 behavior access1
[AP-qospolicy-access] classifier access2 behavior access2
[AP-qospolicy-access] interface wlan-bss1
[AP-WLAN-BSS1] qos apply policy access inbound
