PLANET XGS3-24040 - Manual (Page 458)

Chapter 46 ACL Configuration
46-20
Scenario 4:
The configuration requirement is stated as below: IPv6 protocol runs on the interface 600 of the switch. And
the IPv6 network address is 2003:1:1:1::0/64. Users in the 2003:1:1:1:66::0/80 subnet should be disabled
from accessing the outside network.
Configuration description:
1． Create the corresponding access list.
2． Configure datagram filting.
3． Bind the ACL to the related interface.
The configuration steps are listed as below.
Switch(config)#ipv6 enable
Switch(config)#ipv6 access-list 600 permit 2003:1:1:1:66::0/80 any-destination
Switch(config)#ipv6 access-list 600 deny 2003:1:1:1::0/64 any-destination
Switch(config)#firewall enable
Switch(config)#firewall default permit
Switch(config)#interface ethernet 1/10
Switch(Config-If-Ethernet1/10)#ipv6 access-group 600 in
Switch(Config-If-Ethernet1/10)#exit
Switch(config)#exit
Configuration result:
Switch#show firewall
Firewall Status: Enable.
Firewall Default Rule: Permit.
Switch#show ipv6 access-lists
Ipv6 access-list 600(used 1 time(s))
ipv6 access-list 600 deny 2003:1:1:1::0/64 any-source
ipv6 access-list 600 permit 2003:1:1:1:66::0/80 any-source
Switch #show access-group interface ethernet 1/10
interface name:Ethernet1/10
IPv6 Ingress access-list used is 600, traffic-statistics Disable.
Scenario 5:
The configuration requirement is stated as below: The interface 1, 2, 5, 7 belongs to vlan100, Hosts with
192.168.0.1 as its IP address should be disabled from accessing the listed interfaces.
Configuration description:
1． Create the corresponding access list.
2． Configure datagram filtering.
3． Bind the ACL to the related interface.