ACL
ACL configurations on the OLT are different for IPv6 and IPv4 on the network which runs both
IPv4 and IPv6 services, irrespective of the networking scenarios and service implementation
schemes. When configuring basic and advanced IPv6 ACLs, ensure that the keyword "ipv6" is
included in the configuration command. For details, see
.
Table 19-3
Commands for configuring IPv4 and IPv6 ACL on the OLT
IPv4
IPv6
IPv6 ACL Supported or
Not
acl
acl ipv6
Supported
packet-filter { inbound |
outbound }
packet-filter { inbound |
outbound } ipv6
Supported
rule
rule
Supported
NOTE
After IPv6 is introduced, the
protocol
parameter in the rule
command is extended to
support the IPv6 protocols.
Security Feature
Anti-IP spoofing configurations for IPv6 and IPv4 are different on the network which runs both
IPv4 and IPv6 services, irrespective of the networking scenarios and service implementation
schemes. If the IPoE and DHCP protocols are used, DHCP option configurations for IPv6 and
IPv4 are also different. For details, see
.
l
The IP addresses in anti-IP spoofing configurations are different for the two services.
l
In the IPv4 configuration, DHCP option is DHCPv4 option 82. In the IPv6 configuration,
DHCP option is DHCPv6 option 18/37.
The DHCP option function is used together with the RAIO function, which enables the
OLT to include physical information (including RID and CID) of the user, such as the
subrack/slot/port. In this way, the BRAS or DHCP server is able to perform user
authentication and tracing. When DHCPv4 is in use, the OLT includes RID and CID to the
option 82 field. When DHCPv6 is in use, the OLT includes the RID to the option 37 field
in the DHCPv6 packet and the CID to the option 18 field. The sub option 7 and sub option
9 functions of DHCPv4 option 82 are not supported by DHCPv6.
Table 19-4
Commands for configuring IPv4 and IPv6 security features on the OLT
IPv4
IPv6
IPv6 Security Supported
or Not
DHCP Option
raio-mode
mode
dhcp-
option82
raio-mode
mode
dhcpv6-
option
Supported
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
19 IPv6 Configuration
Issue 01 (2014-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1875