686ViewsSystem viewPredefined user rolesnetwork-adminExamples# Enable the Stelnet server. system-view[Sysname] ssh server enableRelated commandsdisplay ssh serverssh server ipv6 aclUse ssh server ipv6 acl to specify an ACL to control IPv6 SSH connections to the server.Use undo ssh server ipv6 acl to restore the default.Syntaxssh server ipv6 acl { ipv6 basic-acl-number | ipv6 advanced-acl-number | mac mac-acl-number }undo ssh server ipv6 aclDefaultNo ACLs are specified and all IPv6 SSH clients can initiate SSH connections to the server.ViewsSystem viewPredefined user rolesnetwork-adminParametersipv6 basic-acl-number: Specifies an IPv6 basic ACL number in the range of 2000 to 2999.ipv6 advanced-acl-number: Specifies an IPv6 advanced ACL number in the range of 3000 to 3999.mac mac-acl-number: Specifies a Layer 2 ACL by its number in the range of 4000 to 4999.Usage guidelinesThe specified ACL filters IPv6 SSH clients' connection requests. Only the IPv6 SSH clients that theACL permits can initiate SSH connections to the device.All IPv6 SSH clients can initiate SSH connections to the device when any one of the followingconditions exists:• You do not specify an ACL.• The specified ACL does not exist.• The specified ACL does not have rules.The ACL takes effect only on SSH connections that are initiated after the ACL configuration.If you execute this command multiple times, the most recent configuration takes effect.Examples# Configure ACL 2001 and permit only the users on the subnet 1::1/64 to initiate SSH connections tothe server.
