description ingress protocol matching access list addrouter r1 int eth1 eth 0000.0000.1111 $1a$ $1b$ ! access-list test4 deny 1 any all any all permit all any all any all exit access-list test6 deny 58 any all any all permit all any all any all exit vrf def v1 rd 1:1 exit int eth1 vrf for v1 ipv4 addr 1.1.1.1 255.255.255.252 ipv6 addr 1234::1 ffff:ffff:: ipv4 access-group-in test4 ipv6 access-group-in test6 exit ! addrouter r2 int eth1 eth 0000.0000.2222 $1b$ $1a$ ! vrf def v1 rd 1:1 exit int eth1 vrf for v1 ipv4 addr 1.1.1.2 255.255.255.252 ipv6 addr 1234::2 ffff:ffff:: exit ! r1 tping 100 5 1.1.1.1 /vrf v1 r1 tping 100 5 1234::1 /vrf v1 r1 tping 0 5 1.1.1.2 /vrf v1 r1 tping 0 5 1234::2 /vrf v1 r1 output show access-list test4 r1 output show access-list test6 output ../binTmp/crypt-acl.html here is the ipv4 acl:
show:0
here is the ipv6 acl:
show:1
!