Allied Telesis AT-IX5-28GPX, Manual

Page: 943 / 1928

C613-50057-01 REV A Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch 927
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
IP
V
6 S
OFTWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
IPV
6
ACCESS
-
LIST EXTENDED
(
NAMED
)
ipv6 access-list extended (named)
Overview Use this command when configuring an IPv6 extended access-list for filtering
frames that permit or deny IP, ICMP, TCP, UDP packets or ICMP packets with a
specific value based on the source or destination.
The no variant of this command removes a specified IPv6 extended access-list.
Syntax
[list-name]
ipv6 access-list extended < list-name >
no ipv6 access-list extended < list-name >
Syntax
[any|icmp|ip]
ipv6 access-list extended < list-name > {deny|permit}
{any|icmp|ip} {< ipv6-source-address/prefix-length >|any}
{< ipv6-destination-address/prefix-length >|any} [<icmp-type
< icmp-type >][log]
no ipv6 access-list extended < list-name > {deny|permit}
{any|icmp|ip} {< ipv6-source-address/prefix-length >|any}
{< ipv6-destination-address/prefix-length >|any} [<icmp-type
< icmp-type >][log]
Syntax [tcp|udp]
ipv6 access-list extended < list-name > {deny|permit} {tcp|udp}
{< ipv6-source-address/prefix-length >|any} {eq < sourceport >|lt
< sourceport >|gt < sourceport >|ne
< sourceport >}{< ipv6-destination-address/prefix-length >|any}
{eq < destport >|lt < destport >|gt < destport >|ne < destport >} [log]
no ipv6 access-list extended < list-name > {deny|permit}
{tcp|udp} {< ipv6-source-address/prefix-length >|any} {eq
< sourceport >|lt < sourceport >|gt < sourceport >|ne
< sourceport >}{< ipv6-destination-addr/prefix-length >|any} {eq
< destport >|lt < destport >|gt < destport >|ne < destport >} [log]
Parameter Description
< list-name >
A user-defined name for the IPv6 software extended access-
list.
Parameter Description
< list-name >
A user-defined name for the IPv6 software extended
access-list.
deny
The IPv6 software extended access-list rejects packets
that match the type, source, and destination filtering
specified with this command.
permit
The IPv6 software extended access-list permits packets
that match the type, source, and destination filtering
specified with this command.
any
For ICMP|IP
The IPv6 software extended access-list matches any
type of packet.