Ipv6 Access Control Policy Command Set - ADTRAN AOS Version R10.1.0 Command Reference Manual

Command Reference Guide
IP 6 A
V CCESS
An Internet Protocol version 6 (IPv6) access control policy (ACP) defines a policy class containing IPv6
access control lists (ACLs) in the ADTRAN Operating System (AOS) command line interface (CLI). The
ACP is a named policy with multiple action entries.
IPv4 ACPs are also supported by AOS, but are explained separately in this document. Refer to
Control Policy Command Set on page 3144
To create an IPv6 ACP and activate the IPv6 Access Control Policy Configuration mode, enter the ipv6
policy-class <ipv6 acp name> command at the Global Configuration mode prompt. For example:
>enable
#config terminal
(config)#ipv6 policy-class PRIVATE
(config-policy6-class)#
Configured IPv6 ACPs will only be active if the ipv6 firewall command has been entered at
the Global Configuration mode prompt to enable the AOS IPv6 security features. All
configuration parameters are valid, but no security data processing will be attempted
unless the security features are enabled.
Before applying an IPv6 ACP to an interface, verify your Telnet or secure shell (SSH)
connection will not be affected by the policy. If an IPv6 ACP is applied to the interface you
are connecting through and it does not allow Telnet or SSH traffic, your connection will be
lost.
Technology Review
IPv6 ACPs and ACLs regulate traffic through the routed network. When designing your traffic flow
configuration, it is important to keep the following in mind:
• An IPv6 ACL serves as a packet selector, defining exactly which packets should take the given action.
• An IPv6 ACP defines the action to take on the packets selected by the ACL.
• An IPv6 ACL is inactive until it is assigned to an active IPv6 ACP.
• An IPv6 ACP is inactive until it is assigned to an interface.
60000CRG0-35E
C P
ONTROL OLICY
for more information on configuring IPv4 ACPs.
Copyright © 2012 ADTRAN, Inc.

IPv6 Access Control Policy Command Set

C S
OMMAND ET
IPv4 Access
3192