Qtech QSW-2910-28F-AC [94/212] Ipv6 acl key mode

+7(495) 797-3311 www.qtech.ru

Москва, Новозаводская ул., 18, стр. 1

access-list link name [ match-order { config | auto } ]

(2) Defining layer 2 ACL rule(layer 2 ACL with name ID configuration mode)

{ permit | deny } [ protocol ] ingress { { [ source-start-vlan-id source-end-vlan-id ] [ interface

interface-num] } | any } [ time-range time-range-name ]

(3) Delete all the subitems or one subitem in one ACL with number ID or name ID or all

ACLs.(global configuration mode)

no access-list { all | { access-list-number | name access-list-name } [ subitem ] }

Use { permit | deny } command repeatedly to define more rules for the same ACL. Specifying

matching order cannot be modified.

By default, the matching order is user configured order (config).

Concrete parameter meaning refers to corresponded command line.

6.2.4 IPV6 ACL key mode

There are 2 kinds of IPV6 ACL key mode: mac mode and dstip mode. In mac mode, the

source/destination mac in L2 ACL is effective, but 120-127bit of destination IPv6 address in

extended ACL is effective. In dstip mode, 128 bit of destination IPv6 address in extended ACL

can be effective, but the source/destination mac in L2 ACL is not effective. The default mode is

dstip.

Configure it in global configuration mode

ipv6-acl-key-mode mac | dstip

6.2.5 Activate ACL

After activating ACL, it can be effective. Use access-group command to activate accessing

control list.

Configure it in global configuration mode.

 Activate ACL

access-group { user-group { access-list-number | access-list-name } [ subitem subitem ] |

{ [ ip-group { access-list-number | access-list-name } [ subitem subitem ] ] [ link-group

{ access-list-number | access-list-name } [ subitem subitem ] ] } }

 Cancel activating ACL

no access-group { all | user-group { access-list-number | access-list-name } [ subitem

subitem ] | { [ ip-group { access-list-number | access-list-name } [ subitem subitem ] ] [ link-

group { access-list-number | access-list-name } [ subitem subitem ] ] } }