391
ssh server ipv6 acl
Use ssh server ipv6 acl to control access to the IPv6 SSH server.
Use undo ssh server ipv6 acl to restore the default.
Syntax
ssh server ipv6 acl [ ipv6 ] acl-number
undo ssh server ipv6 acl
Default
An SSH server allows all IPv6 SSH clients to access the server.
Views
System view
Predefined user roles
network-admin
Parameters
ipv6: Specifies an IPv6 ACL. If this keyword is not specified, Layer 2 ACL is applied.
acl-number: Specifies an ACL by its number. If the ipv6 keyword is specified, the value range for this
argument is 2000 to 3999. If the ipv6 keyword is not specified, the value range for this argument is 4000
to 4999.
Usage guidelines
You can use this command to filter the IPv6 SSH clients' request packets by referencing an IPv6 ACL:
• If the ACL has rules configured, only the IPv6 SSH clients whose request packets match the permit
statement in this ACL can access the server.
• If the ACL does not exist, or if the ACL does not have any statement, all the IPv6 SSH clients can
access the server.
The ACL filters only new SSH connections after the configuration.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure ACL 2001 and reference the ACL to allow only IPv6 SSH clients on the 1::1/64 to access the
server.
<Sysname> system-view
[Sysname] acl ipv6 number 2001
[Sysname-acl6-basic-2001] rule permit source 1::1 64
[Sysname-acl6-basic-2001] quit
[Sysname] ssh server ipv6 acl ipv6 2001
Related commands
display ssh server
To Next Page
Loading...
Need help?
General
