Zte ZXR10 ZSR V2 - Ipv6 ACL Configuration Example; Figure 20-1 Ipv6 ACL Configuration Example

ZXR10ZSRV2CongurationGuide(IPv6)
CommandFunction
ZXR10(config)#showrunning-configport-acl[
all][|{begin|exclude|include}<key_words>]
DisplaysalltheIPv6ACLbinding
information(andtheIPv4ACLbinding
informationaswellasifanyIPv4ACL
isbound).
–EndofSteps–
20.3IPv6ACLCongurationExample
CongurationDescription
InthenetworkasshowninFigure20-1,supposebothPC1andPC2sendtelnetrequests
throughR2toR1.R1expectstoreceivetheloginrequestsofPC1onlybutnotthelogin
requestsofPC2.ThenanACLcanbeboundtotheingressdirectionoftheinterface
gei-1/3tolteroutthetelnetpacketsfromPC2(ortheACLmaybebindedtotheegress
directionoftheinterfacegei-1/4).
Figure20-1IPv6ACLCongurationExample
Inthiscase,itisonlynecessarytocreateoneACLandaddthefollowingruletothisACL:
DenythetelnetpacketsmatchingtheIPaddressofPC2andusingtheprotocoltypeTCP
andtheporttypetelnet.ThenbindtheACLtotheingressdirectionoftheinterfacegei-1/3
ortheegressdirectionoftheinterfacegei-1/4.
Aftertheabovecongurationiscompleted,therequestsinitiatedbyPC2donotreachR1
butarediscardedwhentheyreachR2evenifPC2hasnotobtainedthetelnetusername
andpasswordofR1.TheothercommunicationsofR1andPC2,however,arenotbe
affected.
CongurationFlow
1.EnableIPv6andconguretheinterfaceaddressesonrouters.
2.Firstcreateanipv6-access-list.Duringthecreation,acustomizednamecanbe
assignedtothislistbutthelengthofthenameshallnotexceed31characters.
20-4
SJ-20140504150128-018|2014-05-10(R1.0)ZTEProprietaryandCondential