mipv6_acl.conf(5)

NAME
mipv6_acl.conf - MIPL Mobile IPv6 access control list file

DESCRIPTION
mipv6_acl.conf is the mobile node access control file. This file is normally used by mipdiag(8). It contains a set of rules according to which the home agent restricts mobile node access. Rule list is read from top to bottom and the first matching rule is used. If ACL contains no rules all mobile nodes are allowed to register. If ACL has one or more rules implicit DENY ::/0 (all) is used as last line. When using DENY only ACL explicit ALLOW ::/0 (all) is required. When allowing or denying single nodes use 128 as prefix length.

RULES

FLUSH
    This rule empties the whole list. When list is empty all nodes are allowed to register. FLUSH should only be used as the first rule. FLUSH has no arguments.

ALLOW ipv6-address/plen
    ALLOW rule lets nodes with matching prefix to register. Mobile node's address is compared to ipv6-address using the plen first bits.

DENY ipv6-address/plen
    DENY rule blocks registration from nodes with matching prefix. Mobile node's address is compared to ipv6-address using the plen first bits.

EXAMPLES
Allow only nodes 3ffe:2620:6:1234:abcd::1 and 3ffe:2620:6:1234:abcd::2 to register.

  ALLOW 3ffe:2620:6:1234:abcd::1/128
  ALLOW 3ffe:2620:6:1234:abcd::2/128

Allow whole 3ffe:2620:6:1234:: network to register except 3ffe:2620:6:1234:abcd::.

  DENY 3ffe:2620:6:1234:abcd::/80
  ALLOW 3ffe:2620:6:1234::/64

Just deny 3ffe:2620:: and let the rest register.

  DENY 3ffe:2620::/32
  ALLOW ::/0

AUTHOR
Antti J Tuominen <ajtuomin@tml.hut.fi>

SEE ALSO
mipdiag(8)