FoxGate S63 series, Руководство по настройке

Страница: 402 / 565

ACL Configuration
401
{any-destination-mac|{host-destination-mac
<host_dmac> }|{ <dmac><dmac-mask> }}
{eigrp|gre|igrp|ip|ipinip|ospf|{ <protocol-num> }}
{{ <source><source-wildcard> }|any-source|
{host-source <source-host-ip> }}
{{ <destination><destination-wildcard> }|any-desti
nation| {host-destination <destination-host-ip> }}
[precedence <precedence> ][tos <tos> ][time-range <
time-range-name> ]
the other IP protocol; the no
form command deletes this
name-based extended
access rule.
c. Exit MAC-IP Configuration Mode
Command Explanation
Extended name-based MAC-IP access Mode
exit
Quit extended name-based
MAC-IP access mode.
（
10
）
Configuring a numbered standard IPv6 access-list
Command Explanation
Global Mode
ipv6 access-list <num> {deny | permit}
{{ <sIPv6Addr> < sPrefixlen >} | any-source |
{host-source <sIpv6Addr> }}
no ipv6 access-list <num>
Creates a numbered
standard IPv6 access-list, if
the access-list already
exists, then a rule will add to
the current access-list; the
―
no access-list
<num>
― command deletes a
numbered standard IPv6
access-list.
（
11
）
Configuring a numbered extensive IPv6 access-list
Command Explanation
Global Mode
ipv6 access-list <num-ext> {deny | permit} icmp
{{ <sIPv6Prefix/sPrefixlen> } | any-source |
{host-source <sIPv6Addr> }}
{ <dIPv6Prefix/dPrefixlen> | any-destination |
{host-destination <dIPv6Addr> }} [< icmp-type >
[ <icmp-code> ]] [dscp <dscp> ] [flow-label
<fl> ][time-range <time-range-name> ]
Creates a numbered
extended IPv6 access-list, if
the access-list already
exists, then a rule will add to
the current access-list; the
no command deletes a
numbered standard IPv6