Chapter 4 IPv6 ACL Configuration
S2(config)#show ipv6-access-lists brief
No.
ACL
RuleSum
-------------------------------------------------------
1
test
2
/*Check the ACL of the specified name. In this mode, information
about the number of rules of the specified ACL is shown.*/
S2(config)#show ipv6-access-lists name test
ipv6-access-list test
2/2 (showed/total)
10 deny tcp 100:1::1:2/128 eq telnet 110:1::1:2/128
20 permit ip any any
/*Check the details of all ACLs on the router. In this mode,
information about the number of rules of each ACL is shown.*/
S2(config)#show ipv6-access-lists
ipv6-access-list test
2/2 (showed/total)
10 deny tcp 100:1::1:2/128 eq telnet 110:1::1:2/128
20 permit ip any any
Check the interface bound with the ACL. Two methods are available for checking the
binding between the ACL and the interface:
/*Check the binding between IPv6
ACLs on the router and the
related interfaces*/
S2(config)#show ipv6-access-groups
Interface name
Direction
ACl name
------------------------------------------------------
gei-0/1/1/3
Ingress
test
/*Check the binding between the specified interface and the
corresponding ACL*/
S2(config)#show running-config-interface port-acl gei-0/1/1/3
! <PORT_ACL>
interface gei-0/1/1/3
ipv6-access-group ingress test
!
! </PORT_ACL>
/*Check the binding between all ACLs on the router and the
related interfaces, including IPv4 ACLs and IPv6 ACLs*/
S2(config)#show running-config port-acl
! <PORT_ACL>
interface gei-0/1/1/8
ipv4-access-group ingress 1K
4-11
SJ-20150114102049-011|2015-01-15 (R1.0)
ZTE Proprietary and Confidential