Hi, I seem to be unable to get SSH Access via IPv6 restricted on a Jetcore with Provider Firmware 08.0.01v.
After reading the manual, my understanding is that the following should restrict ssh access only to subnet 2001:db8:1:2::/64: ipv6 access-list ipv6-mgmt-in permit ipv6 2001:db8:1:2::/64 any ssh access-group ipv6 ipv6-mgmt-in As all IPv6 acl's have an implicit deny ipv6 any any rule as soon as any permit rules are configured this should block everything but the subnet 2001:db8:1:2::/64 from having access using SSH. But when I test from any other IPv6 address I can log on to SSH without any trouble. I tried to use a manual deny ipv6 any any rule in the acl without any difference. Does anybody successfully restrict SSH Access on IPv6 and can give me a hint here? Thanks, Philipp _______________________________________________ foundry-nsp mailing list [email protected] http://puck.nether.net/mailman/listinfo/foundry-nsp
