2-417
Catalyst 3750 Switch Command Reference
OL-8552-07
Chapter 2 Catalyst 3750 Switch Cisco IOS Commands
permit (IPv6 access-list configuration)
permit (IPv6 access-list configuration)
Use the
permit
IPv6 access list configuration command to set permit conditions for an IPv6 access list.
Use the
no
form of this command to remove the permit conditions.
permit
{
protocol
}
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
dscp
value
]
[
fragments
]
[
log
]
[
log-input
] [
sequence
value
]
[
time-range
name
]
no permit
{
protocol
}
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
dscp
value
]
[
fragments
]
[
log
]
[
log-input
] [
sequence
value
]
[
time-range
name
]
Note
Although visible in the command-line help strings, the
flow-label
,
reflect,
and
routing
keywords are
not supported.
Internet Control Message Protocol
permit icmp
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
icmp-type
[
icmp-code
] |
icmp-message
] [
dscp
value
]
[
log
]
[
log-input
] [
sequence
value
] [
time-range
name
]
Transmission Control Protocol
permit tcp
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
ack
] [
dscp
value
]
[
established
] [
fin
]
[
log
]
[
log-input
] [
neq
{
port
|
protocol
}] [
psh
] [
range
{
port
|
protocol
}] [
rst
] [
sequence
value
] [
syn
] [
time-range
name
]
[
urg
]
User Datagram Protocol
permit udp
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
dscp
value
] [
log
]
[
log-input
] [
neq
{
port
|
protocol
}] [
range
{
port
|
protocol
}] [
sequence
value
] [
time-range
name
]
Note
Although visible in the command-line help strings, the
flow-label
,
reflect,
and
routing
keywords are
not supported.
