2-386
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Command Reference
OL-13271-03
Chapter 2 Cisco Catalyst Blade Switch 3130 and 3032 for Dell Cisco IOS Commands
permit (IPv6 access-list configuration)
permit (IPv6 access-list configuration)
Use the
permit
IPv6 access list configuration command on the switch stack or on a standalone switch to
set permit conditions for an IPv6 access list. Use the
no
form of this command to remove the permit
conditions.
permit
{
protocol
}
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
dscp
value
]
[
fragments
]
[
log
]
[
log-input
] [
routing
] [
sequence
value
] [
time-range
name
]
no permit
{
protocol
}
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
dscp
value
]
[
fragments
]
[
log
]
[
log-input
] [
routing
] [
sequence
value
] [
time-range
name
]
Internet Control Message Protocol
permit icmp
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
icmp-type
[
icmp-code
] |
icmp-message
] [
dscp
value
]
[
log
]
[
log-input
] [
routing
] [
sequence
value
] [
time-range
name
]
Transmission Control Protocol
permit tcp
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
ack
] [
dscp
value
]
[
established
] [
fin
]
[
log
]
[
log-input
] [
neq
{
port
|
protocol
}] [
psh
] [
range
{
port
|
protocol
}] [
rst
] [
routing
] [
sequence
value
] [
syn
] [
time-range
name
]
[
urg
]
User Datagram Protocol
permit udp
{
source-ipv6-prefix
/
prefix-length
|
any
|
host
source-ipv6-address
}
[
operator
[
port-number
]]
{
destination-ipv6-prefix
/
prefix-length
|
any
|
host
destination-ipv6-address
}
[
operator
[
port-number
]]
[
dscp
value
] [
log
]
[
log-input
] [
neq
{
port
|
protocol
}] [
range
{
port
|
protocol
}] [
routing
] [
sequence
value
] [
time-range
name
]
Note
Although visible in the command-line help strings, the
flow-label
and
reflect
keywords are not
supported.
This command is supported only if your switch has a switch database management (SDM) dual IPv4 and
IPv6 template configured.