工程4项目4IPv6安全配置.pptVIP

The above example shows a site where global and site-local IPv6 addresses are assigned to hosts on the network. Site-local addresses should not be sent out to the Internet. The network administrator decides to place an outgoing filter on the border router to prevent site-local addresses from leaking out to the Internet. The access-list named “blocksite” has 2 entries: ipv6 access-list blocksite deny fec0:0:0:2::/64 any ipv6 access-list blocksite permit any any The first command denies the site-local address of fec0:0:0:2::/64. If the first 64 bits match the source address, then the packet