1692252725,

问题描述

用SSH server ipv6 ACL命令这条命令在SR66上设置对ipv6 NETCONF over SSH客户端的访问控制不生效，在SR88上可以

过程分析

ssh server ipv6 acl命令用来设置对IPv6 SSH客户端的访问控制，但是目前这个命令在SR66上不能设置对NETCONF over SSH客户端的访问控制。而SR88没有这个限制。

解决方法

中低端系列路由器会在后续版本放开这个限制，目前可先通过接口包过滤实现，过滤掉控制器的ipv6地址。

#                                                                                                                                  

interface M-GigabitEthernet0/0/0                                                                                                   

 ip address 172.16.99.60 255.255.0.0                                                                                               

 packet-filter ipv6 3000 inbound                                                                                                   

 ipv6 address 172:16:21::99:60/64                                                                                                   

#                                                                                                                                  

return                                                                                                                              

[99.60-M-GigabitEthernet0/0/0]qu                                                                                                   

[99.60]dis acl ipv                                                                                                                  

[99.60]dis acl ipv6 a                                                                                                              

[99.60]dis acl ipv6 all                                                                                                             

Advanced IPv6 ACL 3000, 1 rule,                                                                                                    

ACL's step is 5                                                                                                                     

 rule 0 deny ipv6 source 172:16:21::100/128 (380 times matched)  

 

内容来源：知了社区，基于知识共享署名-相同方式共享3.0中国大陆许可协议
CRM论坛（CRMbbs.com）——一个让用户更懂CRM的垂直性行业内容平台,CRM论坛致力于互联网、客户管理、销售管理、SCRM私域流量内容输出5年。 如果您有好的内容，欢迎向我们投稿，共建CRM多元化生态体系，创建CRM客户管理一体化生态解决方案。,SR66 限制对ipv6 NETCONF over SSH客户端的访问控制