Filter
Top Products
Classifier-Based Software Configuration
Creating a Traffic Class
Example of How IPv6 Mask Bit Settings Define a Match. Figure 9-4
shows an example in which an IPv6 prefix-length of 126 is used to select four
IPv6 addresses in a match statement. The specified source IPv6 address is:
2001:DB8:0000:0000:244:17FF:FEB6:D37D. The IPv6 prefix-length (/126) results in
the IPv6 mask: FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFC.
1st
Block
2nd
Block
3rd
Block
4th
Block
5th
Block
6th
Block
7th
Block
8th
Block
Manager- or Operator-Level Access
IPv6 mask for FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFC The “F” value in the first 126 bits of the
/126 prefix mask specifies that only the exact
IPv6 address 2001 DB8 0000 0000 244 17FF FEB6 D37D
value of each corresponding bit in an
IPv6 address is allowed. However, the
binary equivalent (1100) of the “C”
value in the mask allows four possible
combinations (D37C, D37D, D37E, and
D37F) in the last block of a matching
IPv6 address.
Figure 9-4. Example: Mask for Matching Four IPv6 Devices
Figure 9-5 shows the “on” and “off” settings in the last block of the resulting
IPv6 mask that determine the matching IPv6 addresses. In this mask, all bits
except the last two are set to 1 (“on”) and must be the same in an IPv6 address.
The binary equivalent of hexadecimal C is 1100, which allows the last two bits
to differ.
Last block in mask: FFFC
Last block in IPv6 address: D37D
Bit Numbers Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit Bit
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
F F F
C
FFFC: Bit settings in
last block of mask
D37D: Bit settings in
last block of IPv6
1 1 0 1 0 0 1 1 0
1 1 1 1 1 0 1
address
Mask-bit settings: = 1 (On) = Corresponding bit in IPv6 address must be the same binary value.
= 0 (Off) = Corresponding bit in IPv6 address can be either binary value (0 or 1).
Figure 9-5. Example: How a Mask Determines Four Authorized IPv6 Manager Addresses
9-22