Zte ZXR10 ZSR V2 - Page 257

Chapter20IPv6ACLConguration
3.EntertheIPv6ACLcongurationmodeafterthelistiscreatedandthenaddrules.A
packettypecanbespeciedforeachrule,andthepermitordenyactionappliesto
thepackettype.
4.Bindthecustomizedipv6-access-listtotheingressoregressdirectionoftheinterface
towhichtrafclteringapplies.
CongurationCommands
Thisexampledoesnotcovertheinterfaceaddressconguration,andisomittedinthis
example.
CongurationonR2:
R2(config)#ipv6-access-listtest
R2(config-ipv6-acl)#ruledenytcp100:1::1:2/128eq23110:1::1:2/128
R2(config-ipv6-acl)#rulepermitipanyany
R2(config-ipv6-acl)#exit
R2(config)#ipv6-access-groupinterfacegei-1/3ingresstest
CongurationVerication
ChecktheconguredACLinoneofthefollowingthreemodes,asshownbelow.
/*CheckalltheACLsontherouter.Inthismode,allthenames
andnumberofACLsareshown*/
R2(config)#showipv6-access-listsbrief
No.ACLRuleSum
-------------------------------------------------------
1test2
/*ChecktheACLofthespecifiedname.Inthismode,information
aboutthenumberofrulesofthespecifiedACLisshown.*/
R2(config)#showipv6-access-listsnametest
ipv6-access-listtest
2/2(showed/total)
10denytcp100:1::1:2/128eqtelnet110:1::1:2/128
20permitipanyany
/*CheckthedetailsofallACLsontherouter.Inthismode,
informationaboutthenumberofrulesofeachACLisshown.*/
R2(config)#showipv6-access-lists
ipv6-access-listtest
2/2(showed/total)
10denytcp100:1::1:2/128eqtelnet110:1::1:2/128
20permitipv6anyany
ChecktheinterfaceboundwiththeACL.Twomethodsareavailableforcheckingthe
bindingbetweentheACLandtheinterface,asshownbelow.
20-5
SJ-20140504150128-018|2014-05-10(R1.0)ZTEProprietaryandCondential