3com S7906E 설치 설명서
3-1
3
IPv6 ACL Configuration
When configuring IPv6 ACLs, go to these sections for information you are interested in:
z
z
z
z
z
z
Creating a Time Range
z
Refer to section
Configuring a Basic IPv6 ACL
Basic IPv6 ACLs filter packets based on source IPv6 address. They are numbered in the range 2000 to
2999.
Configuration Prerequisites
If you want to reference a time range to a rule, define it with the time-range command first.
Configuration Procedure
Follow these steps to configure a basic IPv6 ACL:
To do…
Use the command…
Remarks
Enter system view
system-view
––
Create and enter basic
IPv6 ACL view
IPv6 ACL view
acl ipv6 number acl6-number [ name
acl6-name ] [ match-order { auto |
config } ]
acl6-name ] [ match-order { auto |
config } ]
Required
The default match order is
config.
config.
If you specify a name for an
IPv6 ACL when creating the
ACL, you can use the acl ipv6
name acl6-name command to
enter the view of the ACL later.
IPv6 ACL when creating the
ACL, you can use the acl ipv6
name acl6-name command to
enter the view of the ACL later.
Create or modify a rule
rule [ rule-id ] { deny | permit }
[ fragment | logging | source
{ ipv6-address
[ fragment | logging | source
{ ipv6-address
prefix-length |
ipv6-address/prefix-length | any } |
time-range time-range-name ] *
time-range time-range-name ] *
Required
To create multiple rules, repeat
this step.
this step.
Note that the logging and
fragment keywords are not
supported if the ACL is to be
referenced by a QoS policy for
traffic classification.
fragment keywords are not
supported if the ACL is to be
referenced by a QoS policy for
traffic classification.