Filter
Top Products
DES-7200 Configuration Guide Chapter 1 Access Control List
Configuration
1-17
DES-7200> enable
DES-7200# config terminal
DES-7200(config)# ipv6 access-list v6-list
DES-7200(config-ipv6-nacl)# permit ipv6 ::192:68:4:12/24 any
DES-7200(config-ipv6-nacl)# deny ipv6 any any
DES-7200(config-ipv6-nacl)# exit
DES-7200(config)# interface gigabitEthernet 0/1
DES-7200(config-if)# ipv6 traffic-filter v6-list in
DES-7200(config-if)# end
DES-7200# show access-lists
ipv6 access-list extended v6-list
permit ipv6 ::192.168.4.12 any
deny any any
DES-7200#
Caution
1. For DES-7200 series, IPv6 ACL supports the following matching
areas:
Protocol, sip, l4_src,dip, l4_dst, dip, dscp, flow_label.
An IPv6 ACL supports any one of the following three matching areas:
sip, dip
protocol, sip, l4_src, l4_dst, dscp, flow_label, range
protocol, dip, l4_src, l4_dst, dscp, flow_label, range
An ACL cannot match all the above areas. Besides, the IPv6 ACL does
not support the fragment matching.
Besides, when an ACL match sip and dip at the same time, it can not
support the matching of type code of icmp or source and destination
port.
1.6 Configuring ACL80
The ACL80 is also call the custom access list, which means matching the first 80 bytes
of the message to filter the messages. A message consists of a series of byte flows.
The ACL80 enables the user to perform match filtering by bits in the specified 16 bytes
of the first 80 bytes in the message.
Note
The SMAC/DMAC/SIP/DIP/ETYPE of the packets are not contained in
any fields. In other words, you can select to match the above fields or
other 16 bytes.
For any 16-byte field, it is possible to compare or not the configured value by bits. In
other words, it allows setting any bit of those 16 bytes as 0 or 1. There are two factors
in filtering any byte: filtering rule and filter domain template. The bits of the both are
one-to-one corresponding. The filtering rule specifies the value of the field to be filtered.
The filter domain template specifies whether to filter the related fields in the filtering