Chapter 20
IPv6 ACL Configuration
Table of Contents
20.1 IPv6 ACL Overview
The Access Control List (
) is a kind of flow classification policy used to implement
numerous functions such as port-ACL, Unicast Reverse Path Forwarding (
) and
policy routing.
The IPv6 ACL mechanism is used to filter packets by the fields in IPv6 packets.
One IPv6 ACL can have multiple rules, with each rule describing certain matching
conditions. For a given packet, matching starts from the first rule. Once a packet matches
a certain rule, the permit or deny action set in the rule is returned.
20.2 Configuring IPv6 ACL
This procedure describes how to configure an IPv6 ACL rule policy.
Steps
1.
Enter IPv6 ACL configuration mode and configure the IPv6 ACL rule.
Step
Command
Function
1
ZXR10(config)#
ipv6-access-list
<
acl-name
>
Configures the specified IPv6
ACL.
ZXR10(config-ipv6-acl)#
rule
[<
rule-id
>]{
permit
|
deny
}[
flowlabel
<
flowlabel-value
>]{<
0-255
>|
ipv6
|<
protocol-type
>}{[<
source-ipv6-address
>|
any
}{<
destination-ipv6-address
>|
any
}[
dscp
<
dscp-value
>][{[
routing
]
,
[
authen
]
,
[
destopts
]
,
[
fragme
nts
]
,
[
hop-by-hop
]
,
[
esp
]}][
time-range
<
time-range-name
>]
Configures the extended IPv6
ACL rule.
ZXR10(config-ipv6-acl)#
rule
[<
rule-id
>]{
permit
|
den
y
}[
flowlabel
<
flowlabel-value
>]
tcp
{<
source-ipv6-address
>|
any
}[{<
operator
>{<
0-65535
>|<
source-porttype
>}|
range
<
0-65535
>
-
<
0-65535
>}]{<
destination-ipv6-address
>|
any
}[{<
operator
>{<
0-65535
>|<
destination-porttype
>}|
Configures the IPv6 ACL rule
based on TCP.
2
20-1
SJ-20140504150128-018|2014-05-10 (R1.0)
ZTE Proprietary and Confidential
Содержание ZXR10 ZSR
Страница 12: ...This page intentionally left blank IV SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...
Страница 306: ...Figures This page intentionally left blank IV SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...
Страница 308: ...This page intentionally left blank VI SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...