Zte ZXR10 ZSR V2 - Page 255

Chapter20IPv6ACLConguration
range:numberofportoperations,range:0–65535.
<source-port>:indicatesthatthesourceportnumberrangesfrom0to255.
<destination-port>:indicatesthedestinationportnumberrangesfrom0to255.
dscp<value>:indicatestheDSCPeld,range:0to63.
established:indicatesTCPlinkestablishment.ThisparameterisvalidforTCPonly.
<rst><ack><fin><syn><psh><urg>:AcombinationofURG,ACK,PSH,RST ,SYNand
FINTagsinaTCPheader.
routing,authen,destopts,fragments,hop-by-hop,andesp:Options:routingheader,
authenticationheader,destinationoptionheader,fragmentheader,Hop-by-Hop
OptionsHeaderandESPHeader.
time-range:bindsaspecied,existingtime-range.
<base>:basevalueofrule-id,indicatingtheserialnumberoftherstruleafterrules
arerenumberedsuccessfully.Default:10,range:1–2147483644.
<increment>:stepsizeofrule-id,whichisthedifferencebetweentwoneighboring
rule-idsafterrulesarerenumbered.Default:10,range:1–2147483644.
2.BindIPv6ACLtoaninterface.
StepCommandFunction
1ZXR10(config)#ipv6-access-groupinterface
<interface-name>{ingress|egress}<acl-name>
BindsthespeciedIPv6ACL
tothespeciedinterface.
ZXR10(config)#interface<interface-name>Entersinterfaceconguration
mode.
2
ZXR10(config-if-interface-name)#ipv6-access-group
{ingress|egress}<acl-name>
BindsthespeciedIPv6ACL
ininterfaceconguration
mode.
3.Verifythecongurations.
CommandFunction
ZXR10(config)#showipv6-access-lists[config|brief
[name<acl-name>]|name<acl-name>[from<from-id>
to<to-id>]][|<match-type><LINE>]
DisplaystheIPv6ACLlistorbrief
information.
ZXR10(config)#showipv6-access-groups
[{[by-access-list<acl-name>],[by-direction
{ingress|egress}],[by-interface<interface-name>]}]
DisplaystheIPv6ACLbinding
information.Theinformationcanbe
selectivelydisplayedaccordingtothe
commandparameters.
ZXR10(config)#showrunning-configipv6-acl[
all][|{begin|exclude|include}<key_words>]
DisplaystheentireIPv6ACL
information.
20-3
SJ-20140504150128-018|2014-05-10(R1.0)ZTEProprietaryandCondential