Zte ZXR10 ZSR V2 - Chapter 20 IPv6 ACL Configuration; Configuring IPv6 ACL

Chapter20
IPv6ACLConguration
TableofContents
IPv6ACLOverview..................................................................................................20-1
ConguringIPv6ACL...............................................................................................
20-1
IPv6ACLCongurationExample.............................................................................20-4
20.1IPv6ACLOverview
TheAccessControlList(ACL)isakindofowclassicationpolicyusedtoimplement
numerousfunctionssuchasport-ACL,UnicastReversePathForwarding(URPF)and
policyrouting.
TheIPv6ACLmechanismisusedtolterpacketsbytheeldsinIPv6packets.
OneIPv6ACLcanhavemultiplerules,witheachruledescribingcertainmatching
conditions.Foragivenpacket,matchingstartsfromtherstrule.Onceapacketmatches
acertainrule,thepermitordenyactionsetintheruleisreturned.
20.2ConguringIPv6ACL
ThisproceduredescribeshowtocongureanIPv6ACLrulepolicy.
Steps
1.EnterIPv6ACLcongurationmodeandconguretheIPv6ACLrule.
StepCommandFunction
1ZXR10(config)#ipv6-access-list<acl-name>ConguresthespeciedIPv6
ACL.
ZXR10(config-ipv6-acl)#rule[<rule-id>]{permit
|deny}[flowlabel<flowlabel-value>]{<0-255>|
ipv6|<protocol-type>}{[<source-ipv6-address>|
any}{<destination-ipv6-address>|any}[dscp
<dscp-value>][{[routing],[authen],[destopts],[fragme
nts],[hop-by-hop],[esp]}][time-range<time-range-name>]
CongurestheextendedIPv6
ACLrule.
ZXR10(config-ipv6-acl)#rule[<rule-id>]{permit|den
y}[flowlabel<flowlabel-value>]tcp{<source-ipv6-address>|
any}[{<operator>{<0-65535>|<source-porttype>}|range
<0-65535>-<0-65535>}]{<destination-ipv6-address>|
any}[{<operator>{<0-65535>|<destination-porttype>}|
CongurestheIPv6ACLrule
basedonTCP.
2
20-1
SJ-20140504150128-018|2014-05-10(R1.0)ZTEProprietaryandCondential