Ipv6 Packet Filtering Configuration Example; Network Requirements; Configuration Procedure - HPE 3100 v2 Series Configuration Manual

# Create IPv4 ACL 2009, and configure two rules in the ACL. One rule permits packets sourced from
Host A and the other denies packets sourced from any other host during the time range study.
Enable logging for the permit rule.
[DeviceA] acl number 2009
[DeviceA-acl-basic-2009] rule permit source 192.168.1.2 0 time-range study logging
[DeviceA-acl-basic-2009] rule deny source any time-range study
[DeviceA-acl-basic-2009] quit
# Enable the device to generate and output IPv4 packet filtering logs at 10-minute intervals.
[DeviceA] acl logging frequence 10
# Configure the device to output informational log messages to the console.
[DeviceA] info-center source default channel 0 log level informational
# Apply IPv4 ACL 2009 to filter incoming packets on Ethernet 1/0/1.
[DeviceA] interface ethernet 1/0/1
[DeviceA-Ethernet1/0/1] packet-filter 2009 inbound
[DeviceA-Ethernet1/0/1] quit

IPv6 packet filtering configuration example

IMPORTANT:
This example is available only on the HPE 3100 v2 EI switches.

Network requirements

As shown in
every day from 08:00 to 18:00 the interface allows only packets from Host A to pass through.
Configure Device A to output IPv4 packet filtering logs to the console at 10-minute intervals.
Figure 3 Network diagram
Host A
1001::2/ 64
Host B
1001::3/ 64

Configuration procedure

# Create a time range from 08:00 to 18:00 every day.
<DeviceA> system-view
[DeviceA] time-range study 8:0 to 18:0 daily
# Create IPv6 ACL 2009, and configure two rules for the ACL. One permits packets sourced from
Host A and the other denies packets sourced from any other host during the time range study.
Enable logging for the permit rule.
[DeviceA] acl ipv6 number 2009
Figure 3, apply an IPv6 ACL to the incoming traffic of Ethernet 1/0/1 on Device A so that
Eth1/0/1
Device A
IPv 6 network
14