OmniSwitch os6900, Руководство по настройке сети

Страница: 674 / 942

Using Access Control Lists Configuring QoS
page 25-66 OmniSwitch AOS Release 7 Network Configuration Guide June 2013
IPv6 ACLs
An ACL is considered an IPv6 ACL if the ipv6 keyword and/or any of the following specific policy condi-
tion keywords are used in the ACL to classify/filter IPv6 traffic:
Note that IPv6 ACLs are effected only on IPv6 traffic. All other ACLs/policies with IP conditions that do
not use the IPv6 keyword are effected only on IPv4 traffic. For example:
-> policy condition c1 tos 7
-> policy condition c2 tos 7 ipv6
In the above example, c1 is an IPv4 condition and c2 is an IPv6 condition. ACLs that use c1 are consid-
ered IPv4 policies; ACLs that use c2 are considered IPv6 policies. In addition, consider the following
examples:
-> policy condition c3 source port 1/10
-> policy condition c4 source port 1/10 ipv6
Condition c3 applies to all traffic ingressing on port 1/10. However, condition c4 applies only to IPv6 traf-
fic ingressing on port 1/10.
Note the following when configuring IPv6 ACLs:
•
Trusted/untrusted behavior is the same for IPv6 traffic as it is for IPv4 traffic.
•
IPv6 policies do not support the use of network groups, service groups, map groups, or MAC groups.
•
IPv6 multicast policies are not supported.
•
Anti-spoofing and other UserPorts profiles/filters do not support IPv6.
•
The default (built-in) network group, “Switch”, only applies to IPv4 interfaces. There is no such group
for IPv6 interfaces.
Multicast Filtering ACLs
Multicast filtering can be set up to filter clients requesting group membership through the Internet Group
Management Protocol (IGMP). IGMP is used to track multicast group membership. The IP Multicast
Switching (IPMS) function in the switch optimizes the delivery of IP multicast traffic by sending packets
only to those stations that request it. Potential multicast group members can be filtered out so that IPMS
does not send multicast packets to those stations.
For more information about IPMS, see Chapter 24, “Configuring IP Multicast Switching.”
Multicast traffic has its own global disposition. By default, the global disposition is accept . To change the
default, use the qos default multicast disposition command.
IPv6 ACL Keywords
source ipv6
destination ipv6
source tcp port
destination port
source udp port destination udp port
ipv6
nh (next header)
flow-label