Chapter 20 IPv6 ACL Configuration
3.
Enter the IPv6 ACL configuration mode after the list is created and then add rules. A
packet type can be specified for each rule, and the permit or deny action applies to
the packet type.
4.
Bind the customized ipv6-access-list to the ingress or egress direction of the interface
to which traffic filtering applies.
Configuration Commands
This example does not cover the interface address configuration, and is omitted in this
example.
Configuration on R2:
R2(config)#ipv6-access-list test
R2(config-ipv6-acl)# rule deny tcp 100:1::1:2/128 eq 23 110:1::1:2/128
R2(config-ipv6-acl)#rule permit ip any any
R2(config-ipv6-acl)#exit
R2(config)#ipv6-access-group interface gei-1/3 ingress test
Configuration Verification
Check the configured ACL in one of the following three modes, as shown below.
/*Check all the ACLs on the router. In this mode, all the names
and number of ACLs are shown*/
R2(config)#show ipv6-access-lists brief
No.
ACL
RuleSum
-------------------------------------------------------
1
test
2
/*Check the ACL of the specified name. In this mode, information
about the number of rules of the specified ACL is shown.*/
R2(config)#show ipv6-access-lists name test
ipv6-access-list test
2/2 (showed/total)
10 deny tcp 100:1::1:2/128 eq telnet 110:1::1:2/128
20 permit ip any any
/*Check the details of all ACLs on the router. In this mode,
information about the number of rules of each ACL is shown.*/
R2(config)#show ipv6-access-lists
ipv6-access-list test
2/2 (showed/total)
10 deny tcp 100:1::1:2/128 eq telnet 110:1::1:2/128
20 permit ipv6 any any
Check the interface bound with the ACL. Two methods are available for checking the
binding between the ACL and the interface, as shown below.
20-5
SJ-20140504150128-018|2014-05-10 (R1.0)
ZTE Proprietary and Confidential
Содержание ZXR10 ZSR
Страница 12: ...This page intentionally left blank IV SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...
Страница 306: ...Figures This page intentionally left blank IV SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...
Страница 308: ...This page intentionally left blank VI SJ 20140504150128 018 2014 05 10 R1 0 ZTE Proprietary and Confidential ...