C613-50170-01 Rev B
Command Reference for x510 Series
1570
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
6 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
NAMED
IP
V
6
HARDWARE
ACL: ICMP
ENTRY
)
You can use ACLs to redirect packets, by sending them to the CPU, the mirror port,
or a specific VLAN on a specific port. Use such ACLs with caution. They could
prevent control packets from reaching the correct destination, such as EPSR
healthcheck messages and VCStack messages.
Examples
To add a filter entry to the ACL named “my-acl”, to block ICMP packets sent from
network 2001:0db8::0/64 , use the commands:
awplus#
configure terminal
awplus(config)#
ipv6 access-list my-acl
awplus(config-ipv6-hw-acl)#
deny icmp 2001:0db8::0/64 any
To remove a filter entry from the ACL named “my-acl” that blocks all ICMP packets
sent from network 2001:0db8::0/ 64 , use the commands:
awplus#
configure terminal
awplus(config)#
ipv6 access-list my-acl
awplus(config-ipv6-hw-acl)#
no deny icmp 2001:0db8::0/64 any
To specify an ACL named “my-acl1” and add a filter entry that blocks all ICMP6 echo
requests, enter the commands:
awplus#
configure terminal
awplus(config)#
ipv6 access-list my-acl1
awplus(config-ipv6-hw-acl)#
deny icmp any any icmp-type 128
To specify an ACL named “my-acl2” and add a filter entry that blocks all ICMP6 echo
requests on the default VLAN (vlan1), enter the following commands:
awplus#
configure terminal
awplus(config)#
ipv6 access-list my-acl2
awplus(config-ipv6-hw-acl)#
deny icmp any any icmp-type 128
vlan 1
To remove a filter entry that blocks all ICMP6 echo requests from the ACL named
“my-acl1”, enter the following commands:
awplus#
configure terminal
awplus(config)#
ipv6 access-list my-acl1
awplus(config-ipv6-hw-acl)#
no deny icmp any any icmp-type 128
Related
Commands
ipv6 access-list (named IPv6 hardware ACL)
show ipv6 access-list (IPv6 Hardware ACLs)
Command
changes
Version 5.4.6-2.1:
send-to-vlan-port
action parameter added
