C613-50057-01 REV A
Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch
911
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
IP
V
6 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
IPV
6
ACCESS
-
LIST
NAMED
PROTOCOL
FILTER
)
(ipv6 access-list named protocol filter)
Overview
Use this ACL filter to add a filter entry for an IPv6 source and destination address
and prefix, with an IP protocol type specified, to the current named IPv6 access-list.
If a sequence number is specified, the new entry is inserted at the specified
location. Otherwise, the new entry is added at the end of the access-list.
Note that specifying the
send-to-cpu
parameter could result in EPSR healthcheck
messages and other control packets being dropped.
The
no
variant of this command removes a filter entry for an IPv6 source and
destination address and prefix, with an IP protocol type specified, from the current
named IPv6 access-list. You can specify the filter entry for removal by entering
either its sequence number, or its filter entry profile.
Syntax
[<
sequence-number
>
{deny|permit|send-to-cpu|send-to-mirror|copy-to-cpu|copy-to-mi
rror} {ipv6|proto <
ip-protocol>
}
{<
ipv6-source-prefix/prefix-length
>|<
ipv6-source-address
>
<
ipv6-source-wildcard
>|host <
ipv6-source-host
>|any}
{<
ipv6-destination-prefix/prefix-length
>|<
ipv6-destination-add
ress
> <
ipv6-destination-wildcard
>|host
<
ipv6-destination-host
>|any}
[<
sequence-number
>]no
{deny|permit|send-to-cpu|send-to-mirror|copy-to-cpu|copy-to-mi
rror} {ipv6|proto <
ip-protocol>
}
{<
ipv6-source-prefix/prefix-length
>|<
ipv6-source-address
>
<
ipv6-source-wildcard
>|host <
ipv6-source-host
>|any}
{<
ipv6-destination-prefix/prefix-length
>|<
ipv6-destination-add
ress
> <
ipv6-destination-wildcard
>|host
<
ipv6-destination-host
>|any}
no [<
sequence-number
>]
Parameter
Description
<
sequence-number
>
<1-65535>The sequence number for the filter entry
of the selected access control list.
deny
Specifies packets to reject.
permit
Specifies packets to permit.
send-to-cpu
Specifies packets to send to the CPU. Specifying this parameter could
result in EPSR healthcheck messages and other control packets being
dropped.
send-to-mirror
Specifies packets to send to mirror port.
copy-to-cpu
Specifies packets to copy to the CPU.
copy-to-mirror
Specifies packets to copy to the mirror port.
ipv6
Specifies IPv6 packet.