Cisco Catalyst 4500 Series, Руководство по настройке программного обеспечения

Страница: 1673 / 2086

62-49
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 62 Configuring Network Security with ACLs
Configuring RA Guard
Verifying IPv6 OG ACLs
Enter the show ipv6 access-list [ access-list-name ] command, to display the contents of the named
access list or object group ACL (or for all access lists and object group ACLs if no name is entered). For
example:
Switch# show ipv6 access-list example-ipv6-acl
IPv6 access list og-acl
permit object-group mySG object-group myOG any sequence 10
Switch# show ipv6 access-list example-ipv6-acl expanded
IPv6 access list og-acl
permit tcp host 2001::1 any eq www sequence 10
permit udp host 2001::1 any eq xdmcp sequence 10
permit esp host 2001::1 any sequence 10
permit hbh host 2001::1 any sequence 10
permit tcp host 2002::1 any eq www sequence 10
permit udp host 2002::1 any eq xdmcp sequence 10
permit esp host 2002::1 any sequence 10
permit hbh host 2002::1 any sequence 10
permit tcp host 2003::1 any eq www sequence 10
permit udp host 2003::1 any eq xdmcp sequence 10
permit esp host 2003::1 any sequence 10
permit hbh host 2003::1 any sequence 10
permit tcp host 2001::255 any eq www sequence 10
permit udp host 2001::255 any eq xdmcp sequence 10
permit esp host 2001::255 any sequence 10
permit hbh host 2001::255 any sequence 10
permit tcp 2002::1/64 any eq www sequence 10
permit udp 2002::1/64 any eq xdmcp sequence 10
permit esp 2002::1/64 any sequence 10
permit hbh 2002::1/64 any sequence 10
Configuring RA Guard
This section includes these topics:
• Introduction, page 62-50
•
Deployment, page 62-50
• Configuring RA Guard, page 62-51
•
Examples, page 62-51
• Usage Guidelines, page 62-52
Step 3
ipv6 traffic-filter access-list-name { in | out }
Example:
Switch(config-if)# ipv6 traffic-filter
example-ipv6-acl in
Applies the ACL to the interface and specifies whether to
filter inbound or outbound packets.
Step 4
end
Example:
Device(config-ext-nacl)# end
Exits interface configuration mode and returns to
privileged EXEC mode.
Command or Action Purpose