Alcatel-Lucent 6850-48 Network Guide

Page of 1162
Configuring ACLs
Configuring ACLs
page 41-14
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
-> policy condition c2 tos 7 ipv6
In the above example, c1 is an IPv4 condition and c2 is an IPv6 condition. ACLs that use c1 are consid-
ered IPv4 policies; ACLs that use c2 are considered IPv6 policies. In addition, consider the following 
examples:
-> policy condition c3 source port 1/10
-> policy condition c4 source port 1/10 ipv6
Condition c3 applies to all traffic ingressing on port 1/10. However, condition c4 applies only to IPv6 traf-
fic ingressing on port 1/10.
Note the following when configuring IPv6 ACLs:
• IPv6 policies are not supported on the OmniSwitch 6800.
• Trusted/untrusted behavior is the same for IPv6 traffic as it is for IPv4 traffic.
• IPv6 policies do not support the use of network groups, service groups, map groups, or MAC groups.
• IPv6 multicast policies are not supported.
• Anti-spoofing and other UserPorts profiles/filters do not support IPv6.
• The default (built-in) network group, “Switch”, only applies to IPv4 interfaces. There is no such group 
for IPv6 interfaces.
For more information regarding IPv6 condition parameters, see the 
 command in the 
OmniSwitch CLI Reference Guide.
Multicast Filtering ACLs
Multicast filtering may be set up to filter clients requesting group membership via the Internet Group 
Management Protocol (IGMP). IGMP is used to track multicast group membership. The IP Multicast 
Switching (IPMS) function in the switch optimizes the delivery of IP multicast traffic by sending packets 
only to those stations that request it. Potential multicast group members may be filtered out so that IPMS 
does not send multicast packets to those stations.
For more information about IPMS, see 
Multicast traffic has its own global disposition. By default, the global disposition is accept. To change the 
default, use the qos default multicast disposition command.
For multicast filtering, the switch classifies traffic based on the multicast IP address or multicast network 
group and any destination parameters. Note that the destination parameters are used for the client from 
which the switch will receive the IGMP request.
The multicast ip or multicast network group keyword is required in the condition configured for a 
multicast ACL.