Ipv6 Acl Application Configuration Example - H3C S5120-EI Series Configuration Manual

Acl and qos

Hide thumbs Also See for S5120-EI Series:

Table of Contents

[DeviceA] interface GigabitEthernet 1/0/1

[DeviceA-GigabitEthernet1/0/1] packet-filter 2009 inbound

[DeviceA-GigabitEthernet1/0/1] quit

# Enable the device to generate and output IPv4 packet filtering logs at 10-minute intervals.

[DeviceA] acl logging frequence 10

# Configure the device to output informational log messages to the console.

[DeviceA] info-center source default channel 0 log level informational

IPv6 ACL Application Configuration Example

Network requirements

As shown in

Figure

so that everyday from 8:00 to 18:00, the interface allows only packets from Host A to pass through.

Configure Device A to output IPv4 packet filtering logs to the console at an interval of 10 minutes.

Figure 1-2 Network diagram for applying an IPv6 ACL to an interface for packet filtering

Configuration procedure

# Create a time range from 08:00 to 18:00 everyday.

<DeviceA> system-view

[DeviceA] time-range study 8:0 to 18:0 daily

# Create IPv4 ACL 2009, and configure two rules for the ACL. One permits packets sourced from Host

A with the IP address 1001::2 and the other denies packets sourced from any other host during the

time range study. Enable logging for both rules.

[DeviceA] acl ipv6 number 2009

[DeviceA-acl6-basic-2009] rule permit source 1001::2 128 time-range study logging

[DeviceA-acl6-basic-2009] rule deny source any time-range study logging

[DeviceA-acl6-basic-2009] quit

# Apply IPv4 ACL 2009 to filter incoming packets on GigabitEthernet 1/0/1.

[DeviceA] interface GigabitEthernet 1/0/1

[DeviceA-GigabitEthernet1/0/1] packet-filter ipv6 2009 inbound

[DeviceA-GigabitEthernet1/0/1] quit

# Configure the device to collect and output IPv4 packet filtering logs at an interval of 10 minutes.

[DeviceA] acl ipv6 logging frequence 10

# Configure the device to output informational log messages to the console.

[DeviceA] info-center source default channel 0 log level informational

1-2, apply an IPv6 ACL to the incoming traffic of GigabitEthernet 1/0/1 on Device A,

1-17

Table of Contents