beautypg.com

Assigning named ipv6 acls, Assigning named ipv6 acls example 8 – Allied Telesis AT-8100 Series User Manual

Page 1548

background image

Chapter 98: Advanced Access Control Lists (ACLs)

1548

Assigning Named

IPv6 ACLs

To assign a Named IPv6 ACL to a port on the switch, use the IPV6
TRAFFIC-FILTER command in the Port Interface mode. Before assigning
an ACL to a port, you must create the ACL on the switch. With this
command, you can add one ACL at a time to a port. To add another ACL
to a port, repeat the command. Here is the format of the command:

ipv6 traffic-filter <

ipv6_access_list

>

For more information about this command, see “IPV6 TRAFFIC-FILTER”
on page 1632.

This example creates a Named IPv6 ACL called “icmppermit” that permits
ICMP packets from any IPv6 source address to any IPv6 destination
address. Then the IPV6 TRAFFIC-FILTER command assigns
“icmppermit” to port 18:

Table 178. Assigning Named IPv6 ACLs Example

Command

Description

awplus> enable

Enter the Privileged Executive mode
from the User Executive mode.

awplus# configure terminal

Enter the Global Configuration mode.

awplus(config)# ipv6 access-list
icmppermit

Create the permit ACL.

awplus(config-ipv6-acl)# permit
icmp any any

Assign the filter criteria to icmppermit
ACL.

awplus(config-ipv6-acl)# exit

Exit the IP ACL mode.

awplus(config)# interface
port1.0.18

Enter the Port Interface mode for port
18.

awplus(config_if)# ipv6 traffic-
filter icmppermit

Apply the ACL filter criteria with the IPv6
traffic-filter command.