Dell 6.2 Creating an IPv6 Firewall Pol icy, Assigning an IPv6 Policy to a U serRol e

145| IPv6 Suppor t DellPowerConnect W- Series ArubaOS 6.2 | User Guide
The followingexample creates a policy ‘ipv6-web-only’t hat allows only web (HTTP and HTTPS) access for IPv6
clients and assigns the policy to the user role“web-guest”.
NOTE:The user role “web-guest” can include both IPv6 and IPv4 policies, although this example only shows configuration of an IPv6
policy.
Creating an IPv6 Firewall Pol icy
Followingt heprocedure below to create an IPv6 firewall policy via the WebUI.
1. N avigate to the Configuration > Security > Access Contr ol > Policies page.
2. Click A ddt o create a new policy.
3. E nter ipv6-web-only for the Policy Name.
4. T o configure a firewallpolicy, select Session for Policy Type.
5. Click A ddt o add a rulethat allows HTTP t raffic.
a. UnderIP Version column,select IPv6.
b. Under Source, select networ k from the drop-downlist.
c. For Host IP, enter 2002:d81f:f9f0:1000::.
d. For Mask, enter 64ast heprefix-length.
e. UnderService, select ser vice fromt hedrop-down list.
f. Select svc-http from the scrolling list.
g. Click Add.
6. Click A ddt o add a rulet hat allows HTTPS traffic.
a. UnderIP Version column,select IPv6.
b. Under Source, select network from the drop-down list.
c. For Host IP, enter 2002:d81f:f9f0:1000::.
d. For Mask, enter 64 as the prefix-length.
e. UnderService, select ser vice fromt hedrop-down list.
f. Select svc-https from the scrollinglist.
g. Click Add.
.
NOTE:Rul es can be reordered using theup and dow n arrow buttonsprovided for each rule.
7. Click A pplyto apply the configuration.The policy i s not created untilt heco nfigurationis applied.
To create an IPv6 firewall policy using the command-lineinterface, issue the following commands in config mode:
ip access-list session ipv6-web-only
ipv6 network 2002:d81f:f9f0:1000::/64 any svc-http permit
ipv6 network 2002:d81f:f9f0:1000::/64 any svc-https permit
Assigning an IPv6 Policy to a U serRol e
To assign an IPv6 policy using the WebUI:
1. N avigate to the Configuration > Security > Access Contr ol > User Roles page.
2. Click A ddt o create a new user role.
3. E nter web-guest forRo leName.