Configuring an Advanced ACL6
An advanced ACL6 defines rules to filter packets.
Usage Scenario
As shown in Figure 1, an advanced ACL6 is created on Device D to allow Device D to permit all ICMPv6 packets sent from Network B to Network C and deny all ICMPv6 packets sent from Network A to the Network C.
- (Optional) Creating a Validity Period for an ACL6 Rule
- You can create a validity period for an ACL6 rule to control network traffic in a specified period.
- Creating an Advanced ACL6
- You can create an advanced ACL6 and configure parameters for the ACL6.
- (Optional) Configuring an ACL IPv6 Address Pool
- An ACL IPv6 address pool is applicable to the scenario where multiple IPv6 addresses need to be matched. This reduces the workload of manually configuring multiple ACL6 rules to match multiple IPv6 addresses.
- Configuring an Advanced ACL6 Rule
- Advanced ACL6 rules are defined based on the source IPv6 address, destination IPv6 address, protocol type carried over IPv6, source port, and destination port to filter packets.
- Applying an Advanced ACL6
- Advanced ACL6s can be used in multicast packet filtering, QoS services, and routing policies.
- Verifying the Configuration of an Advanced ACL6
- After configuring an advanced ACL6, verify the configuration.