工程4项目4IPv6安全配置程序.ppt

The ipv6 access-list command is similar to the ip access-list command, except that it is IPv6-specific. Use the following configuration command in global configuration mode: ipv6 access-list access-list-name {permit | deny} {source-ipv6-prefix/prefix-length | any} {destination-ipv6-prefix/prefix-length | any} [priority value] IPv6 access lists are identified by using: The access-list-name permit and deny keywords. An implicit deny all is added to the end of the access-list. Prefix and prefix length of the source and destination addresses. The keyword any can be used in place of the prefixes. Optional Priority keyword with a value from 0 – 4294967295. The priority value dictates the order in which the access-list is applied. For instance, in the example below, this line “ipv6 access-list dublin deny fe80::/64 any priority 15” will be applied in between priority 10 and priority 20. Use the ipv6 traffic-filter command with the access-list-name argument to apply the access list to an IPv6 interface. Example: ipv6 access-list dublin deny fec0:0:0:2::/64 any priority 10 ipv6 access-list dublin permit any any priority 20 interface ethernet 0 ipv6 traffic-filter dublin out (Note: IPv6 prefix lists, not access lists, should be used for filtering routing protocol prefixes.) The ipv6 access-list command is similar to the ip access-list command, except that it is IPv6-specific. Use the following configuration command in global configuration mode: ipv6 access-list access-list-name {permit | deny} {source-ipv6-prefix/prefix-length | any} {destination-ipv6-prefix/prefix-length | any} [priority value] IPv6 access lists are identified by using: The access-list-name permit and deny keywords. An implicit deny all is added to the end of the access-list. Prefix and prefix length of the source and destination addresses. The keyword any can be used in place of the prefixes. Optional Priority keyword with a value from 0 – 4294967295. The priority value dictates