Ipv6 Acls; Multicast Filtering Acls - Alcatel-Lucent OmniSwitch AOS Release 7 Manual

IPv6 ACLs

An ACL is considered an IPv6 ACL if the ipv6 keyword and/or any of the following specific policy condi-
tion keywords are used in the ACL to classify/filter IPv6 traffic:
IPv6 ACL Keywords
source ipv6
destination ipv6
source tcp port
destination port
source udp port
Note that IPv6 ACLs are effected only on IPv6 traffic. All other ACLs/policies with IP conditions that do
not use the IPv6 keyword are effected only on IPv4 traffic. For example:
-> policy condition c1 tos 7
-> policy condition c2 tos 7 ipv6
In the above example, c1 is an IPv4 condition and c2 is an IPv6 condition. ACLs that use c1 are consid-
ered IPv4 policies; ACLs that use c2 are considered IPv6 policies. In addition, consider the following
examples:
-> policy condition c3 source port 1/10
-> policy condition c4 source port 1/10 ipv6
Condition c3 applies to all traffic ingressing on port 1/10. However, condition c4 applies only to IPv6 traf-
fic ingressing on port 1/10.
Note the following when configuring IPv6 ACLs:
•
Trusted/untrusted behavior is the same for IPv6 traffic as it is for IPv4 traffic.
•
IPv6 policies do not support the use of network groups, service groups, map groups, or MAC groups.
•
IPv6 multicast policies are not supported.
•
Anti-spoofing and other UserPorts profiles/filters do not support IPv6.
•
The default (built-in) network group, "Switch", only applies to IPv4 interfaces. There is no such group
for IPv6 interfaces.

Multicast Filtering ACLs

Multicast filtering can be set up to filter clients requesting group membership through the Internet Group
Management Protocol (IGMP). IGMP is used to track multicast group membership. The IP Multicast
Switching (IPMS) function in the switch optimizes the delivery of IP multicast traffic by sending packets
only to those stations that request it. Potential multicast group members can be filtered out so that IPMS
does not send multicast packets to those stations.
For more information about IPMS, see
Multicast traffic has its own global disposition. By default, the global disposition is accept. To change the
default, use the qos default multicast disposition command.
page 21-62
destination udp port
ipv6
nh (next header)
flow-label
Chapter 20, "Configuring IP Multicast Switching."
OmniSwitch AOS Release 7 Network Configuration Guide March 2011