Configuring Basic Ipv6 Acl; Configuring Extended Ipv6 Acl - Zte ZXR10 5900 Series User Manual

ZXR10 5900/5200 Series User Manual (Basic Configuration Volume)
Step Command
1
ZXR10(config)#
<acl-number>|name <acl-name>}
2
ZXR10(config-std-v6acl)#
ny}{<source>|any}[mac(<Source-mac><Source
wildcard bits>)][time-range <timerange-name>]
3
ZXR10(config-std-v6acl)#
before}<rule-no>
Example
Step Command
1
ZXR10(config)#
<acl-number>|name <acl-name>}
2
ZXR10(config-ext-v6acl)#
>{permit | deny}{(icmp {<source/prefix>|
any}{<destination/prefix>| any}) | (<protocol
>{<source/prefix>| any}{<destination/prefix>|
any}) | (tcp{<source/prefix>| any}[<rule>{<0-m
axPortNo>|<tcpporttype>}]{<destination/prefix>|
any}[<rule>{<0-maxPortNo>|<tcpporttype>}])
| (udp{<source/prefix>| any}[<rule>{<0-max
PortNo>|<udpporttype>}]{<destination/prefix>|
any}[<rule>{<0-maxPortNo>|<udpporttype>}])
}[ingress(<Source mac address><Source
wildcard bits>)][egress(<Destination mac
address><Destination wildcard bits> )][{time-range
<timerange-name>| event <event-name>}]
3
ZXR10(config-ext-v6acl)#
before}<rule-no>
Example
64 Confidential and Proprietary Information of ZTE CORPORATION

Configuring Basic IPV6 ACL

ipv6 acl standard {number
rule <1-100>{permit|de
move <rule-no>{after |
In this example, define a ACL to permit IP packets with the network
segment as 10.0.0.0.0.0.0.0/16 to pass.
ZXR10(config)# ipv6 acl standard number 2000
ZXR10(config-std-v6acl)# rule

Configuring Extended IPV6 ACL

ipv6 acl extended {number
rule <1-maxRuleNo
move <rule-no>{after |
In this example, define a extended ipv6 ACL to permit IP packets
with the source ip network segment as 10.0.0.0.0.0.0.0/16 and
destination ip network segment as 20.0.0.0.0.0.0.0/16 to pass and
deny the packets with MAC address 0012.0001.0002 to pass.
ZXR10(config)# ipv6 acl extended 2500
ZXR10(config-ext-v6acl)# rule
ZXR10(config-ext-v6acl)#rule 2 deny fragment any any ingress 0012
0001.0002 0000.0000.0000
Function
This enters the basic ACL
configuration mode.
This configures the rules of
ACL.
This moves a rule behind
another rule.
1 permit 10::/16
Function
This enters ACL configuration
mode.
This configures the rules of
ACL.
This moves a rule behind
another rule.
1 permit 10::/16 20::/16