Ipv6 Acl Application Configuration Example - HP A5120 EI Series Configuration Manual

IPv6 ACL application configuration example

Network requirements
As shown in
so that every day from 08:00 to 18:00 the interface allows only packets from Host A to pass through.
Configure Device A to output packet filtering logs to the console at an 10-minute intervals.
Figure 2 Network diagram for applying an IPv6 ACL to an interface for packet filtering
Host A
1001::2/64
Host B
1001::3/64
Configuration procedure
# Create a time range from 08:00 to 18:00 every day.
<DeviceA> system-view
[DeviceA] time-range study 8:0 to 18:0 daily
# Create IPv6 ACL 2009, and configure two rules for the ACL. One rule permits packets sourced from
Host A with the IPv6 address 1001::2 and the other rule denies packets sourced from any other host
during the time range study. Enable logging for both rules.
[DeviceA] acl ipv6 number 2009
[DeviceA-acl6-basic-2009] rule permit source 1001::2 128 time-range study logging
[DeviceA-acl6-basic-2009] rule deny source any time-range study logging
[DeviceA-acl6-basic-2009] quit
# Apply IPv6 ACL 2009 to filter incoming packets on GigabitEthernet 1/0/1.
[DeviceA] interface gigabitethernet 1/0/1
[DeviceA-GigabitEthernet1/0/1] packet-filter ipv6 2009 inbound
[DeviceA-GigabitEthernet1/0/1] quit
# Configure the device to collect and output IPv6 packet filtering logs at 10-minute intervals.
[DeviceA] acl ipv6 logging frequence 10
# Configure the device to output informational log messages to the console.
[DeviceA] info-center source default channel 0 log level informational
Figure 2, apply an IPv6 ACL to the incoming traffic of GigabitEthernet 1/0/1 on Device A
GE1/0/1
Device A
IPv6 network
13