Configuration procedure – H3C Technologies H3C SecPath F1000-E User Manual

Page 863

838

Figure 396 Network diagram

Configuration procedure

NOTE:

In this example, RIPng is configured to ensure the reachability among devices.

Configure SecPath A:
# Configure RIPng.

system-view

[SecPathA] ipv6

[SecPathA] ripng 1

[SecPathA-ripng-1] quit

[SecPathA] interface GigabitEthernet0/3

[SecPathA-GigabitEthernet0/3] ipv6 address 1::1 64

[SecPathA-GigabitEthernet0/3] ripng 1 enable

[SecPathA-GigabitEthernet0/3] quit

[SecPathA] interface GigabitEthernet 0/2

[SecPathA-GigabitEthernet0/2] ipv6 address 2::1 64

[SecPathA-GigabitEthernet0/2] ripng 1 enable

[SecPathA-GigabitEthernet0/2] quit

# Define ACL 3001 to match TCP packets.

[SecPathA] acl ipv6 number 3001

[SecPathA-acl6-adv-3001] rule permit tcp

[SecPathA-acl6-adv-3001] quit

# Define Node 5 of policy aaa, so that TCP packets are forwarded via GigabitEthernet 0/3.

[SecPathA] ipv6 policy-based-route aaa permit node 5

[SecPathA-pbr6-aaa-5] if-match acl6 3001

This manual is related to the following products: