•
If you configure
sequence-number
, the sequence-number is used as a tie breaker for rules with the same
order.
When you use the
log
option, the CP processor logs details about the packets that match. Depending on how
many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’
details.
If you configure the
sequence-number
, the
sequence-number
is used as a tie breaker for rules with the
same order.
NOTE:
When you configure ACL logging and byte counters simultaneously, byte counters may display
an incorrect value. Configure packet counters with logging instead.
Related Commands
•
— configure a filter to drop packets.
•
— configure a filter to forward packets.
Extended IPv6 ACL Commands
The following commands configure extended IPv6 ACLs.
deny
Configure a filter that drops IPv6 packets that match the filter criteria.
Syntax
deny {
ipv6-protocol-number
| icmp | ipv6 | tcp | udp}
To remove this filter, you have two choices:
•
Use the
no seq sequence-number
command syntax if you know the filter’s sequence number
•
Use the
no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp}
command
Parameters
ip-protocol-number
Enter an IPv6 protocol number. The range is 0 to 255.
icmp
Enter the keyword
icmp
to deny Internet Control Message Protocol version 6.
ipv6
Enter the keyword
ipv6
to deny any Internet Protocol version 6.
tcp
Enter the keyword
tcp
to deny the Transmission Control protocol.
udp
Enter the keyword
udp
to deny the User Datagram Protocol.
Defaults
Not configured.
Command Modes
ACCESS-LIST
Command History
This guide is platform-specific. For command information about other platforms, see the relevant
Dell Networking
OS Command Line Reference Guide
.
Version
Description
9.10(0.0)
Introduced on the S6100–ON.
9.8(1.0)
Introduced on the Z9100–ON.
9.0.2.0
Introduced on the S6000.
224
Access Control Lists (ACL)
