Dell Force10 TeraScale C Series, Reference Manual

Page: 703 / 1640

IPv6 Access Control Lists (IPv6 ACLs) | 703
seq
c e s
Assign a sequence number to a deny or permit filter in an IPv6 access list while creating the filter.
Syntax seq sequence-number { deny | permit } { ipv6-protocol-number | icmp | ip | tcp | udp }
{ source address mask | any | host ipv6-address } { destination address | any | host
ipv6-address } [ operator port [ port ]] [ count [ byte ]] | [ log ] [ monitor ]
To delete a filter, use the no seq sequence-number command.
Parameters
sequence-number Enter a number from 0 to 4294967290.
deny
Enter the keyword
deny
to configure a filter to drop packets meeting this
condition.
permit
Enter the keyword
permit
to configure a filter to forward packets meeting
this criteria.
ipv6-protocol-number Enter an IPv6 protocol number.
Range: 0 to 255
icmp
Enter the keyword
icmp
to configure an Internet Control Message Protocol
version 6 filter.
ipv6
Enter the keyword
ipv6
to configure any Internet Protocol version 6 filter.
tcp
Enter the keyword
tcp
to configure a Transmission Control protocol filter.
udp
Enter the keyword
udp
to configure a User Datagram Protocol filter.
source address
Enter the IPv6 address of the network or host from which the packets were
sent in the
x:x:x:x::x
format followed by the prefix length in the
/x
format.
Range: /0 to /128
The
::
notation specifies successive hexadecimal fields of zero.
mask
Enter a network mask in /prefix format (
/x
).
any
Enter the keyword
any
to specify that all routes are subject to the filter.
host ipv6-address
Enter the keyword
host
followed by the IPv6 address of the host in the
x:x:x:x::x
format.
The
::
notation specifies successive hexadecimal fields of zero.
operator (OPTIONAL) Enter one of the following logical operands:
•
eq
= equal to
•
neq
= not equal to
•
gt
= greater than
•
lt
= less than
•
range
= inclusive range of ports (you must specify two ports for the
port
parameter.)
port port
(OPTIONAL) Enter the application layer port number. Enter two port
numbers if using the
range
logical operand.
Range: 0 to 65535
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP