DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
21
3-5 ipv6 access-list
This command is used to create or modify an IPv6 ACL. This command will enter into the IPv6 access-list configuration
mode. Use the no command to remove an IPv6 access-list.
ipv6 access-list {
name
}
no ipv6 access-list {
name
}
Parameters
3-6 permit | deny (ipv6 access-list)
Use the
permit
command to add a permit entry. Use the
deny
command to add a deny entry. Use the no command to
remove an entry.
Extended IPv6 ACL:
[
sn
] {permit | deny}
protocol
{
source-ipv6-prefix/prefix-length
| host
source-ipv6-address
| any} {
destination-ipv6-
prefix/prefix-length
| host
destination-ipv6-address
| any} [dscp
dscp
] [flow-label
flow-label
] [
fragments
] [time-
range
time-range-name
]
Example
This example shows how to use the extended IP ACL. The purpose is to deny Telnet
access from the host, with the IP address 192.168.4.12, to any host in the network
192.168.1.0 and to permit any others.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#ip access-list extended Ext-ip
DXS-3600-32S(config-ext-nacl)#deny tcp host 192.168.4.12 192.168.1.0 0.0.255.255 eq telnet
DXS-3600-32S(config-ext-nacl)#permit ip any any
DXS-3600-32S(config-ext-nacl)#end
DXS-3600-32S#show access-list
Extended IP access list 3999 Ext-ip
10 deny tcp host 192.168.4.12 192.168.1.0 0.0.255.255 eq telnet
20 permit ip any any
DXS-3600-32S#
name
Specifies the name of the IP access-list to be configured. The name can be up to 32
characters long.
Default
None.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
Extended IPv6 ACL only filters the IPv6 packet. The name must be unique among all
(including MAC, IP, IPv6 or Expert) access-lists and the first character of name must
be a letter.
Example
This example shows how to create an IPv6 ACL:
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#ipv6 access-list ext_ipv6
DXS-3600-32S(config-ipv6-nacl)#end
DXS-3600-32S#show access-list
Extended IP access list 3999 Ext-ip
10 deny tcp host 192.168.4.12 192.168.1.0 0.0.0.255 eq telnet
20 permit ip any any
Extended IPv6 access list ext_ipv6
DXS-3600-32S#
Summary of Contents for DXS-3600-16S
Page 1: ...CLI Reference Guide Product Model DXS 3600 Series Layer 2 3 Managed 10GbE Switch Release 1 10 ...
Page 232: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 224 ...
Page 301: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 293 ...
Page 349: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 341 ...
Page 494: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 486 ...
Page 564: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 556 ...
Page 649: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 641 ...