H3C WA2600 series - Ipv6 ACL Configuration Example

To Next Page

To Previous Page

4-12

[AP-behavior-access2] filter deny

[AP-behavior-access2] qos policy access

[AP-qospolicy-access] classifier access1 behavior access1

[AP-qospolicy-access] classifier access2 behavior access2

[AP-qospolicy-access] interface wlan-bss1

[AP-WLAN-BSS1] qos apply policy access inbound

IPv6 ACL Configuration Example

Network Requirements

Perform packet filtering in the inbound direction of interface WLAN-BSS 1 to deny all IPv6 packets but

those with source addresses in the range 4050::9000 to 4050::90FF.

Configuration Procedure

1) Create an ACL that is to be applied to interface WLAN-BSS 1.

# Create a basic IPv6 ACL numbered 2000, and enter its view.

<AP> system-view

[AP] acl ipv6 number 2000

# Create a rule to allow access from IPv6 address 4050::9000 to 4050::90FF.

[AP-acl6-basic-2000] rule 1 permit source 4050::9000/120

[AP-acl6-basic-2000] quit

# Create a basic IPv6 ACL numbered 2001, and enter its view.

[AP] acl ipv6 number 2001

# Create a rule to deny access from other IPv6 addresses.

[AP-acl6-basic-2001] rule 1 deny source any

[AP-acl6-basic-2001] quit

2) Apply the ACLs

# Apply ACL 2000 and ACL 2001.

[AP] traffic classifier access1

[AP-classifier-access1] if-match acl ipv6 2000

[AP-classifier-access1] quit

[AP] traffic behavior access1

[AP-behavior-access1] filter permit

[AP] traffic classifier access2

[AP-classifier-access2] if-match acl ipv6 2001

[AP-classifier-access2] quit