Edge-Core ECS4660-28F, Management Manual, Page: 1172 / 2020

C
HAPTER
30
| Access Control Lists
IPv6 ACLs
– 1172 –
D
EFAULT
S
ETTING
None
C
OMMAND
M
ODE
Standard IPv6 ACL
C
OMMAND
U
SAGE
New rules are appended to the end of the list.
E
XAMPLE
This example configures one permit rule for the specific address
2009:DB9:2229::79 and another rule for the addresses with the network
prefix 2009:DB9:2229:5::/64.
Console(config-std-ipv6-acl)#permit host 2009:DB9:2229::79
Console(config-std-ipv6-acl)#permit 2009:DB9:2229:5::/64
Console(config-std-ipv6-acl)#
R
ELATED
C
OMMANDS
access-list ipv6 (1170)
Time Range (957)
permit , deny
(Extended IPv6 ACL)
This command adds a rule to an Extended IPv6 ACL. The rule sets a filter
condition for packets with specific destination IP addresses, next header
type, or flow label. Use the no form to remove a rule.
S
YNTAX
{ permit | deny } { any | host destination-ipv6-address |
destination-ipv6-address [ /prefix-length ]}
[ dscp dscp ] [ flow-label flow-label ] [ next-header next-header ]
[ time-range time-range-name ]
no { permit | deny } { any | host destination-ipv6-address |
destination-ipv6-address [ /prefix-length ]}
[ dscp dscp ] [ flow-label flow-label ] [ next-header next-header ]
any – Any IP address (an abbreviation for the IPv6 prefix ::/0).
host – Keyword followed by a specific destination IP address.
destination-ipv6-address - An IPv6 destination address or network
class. The address must be formatted according to RFC 2373 “IPv6
Addressing Architecture,” using 8 colon-separated 16-bit
hexadecimal values. One double colon may be used in the address
to indicate the appropriate number of zeros required to fill the
undefined fields.
prefix-length - A decimal value indicating how many contiguous bits
(from the left) of the address comprise the prefix; i.e., the network
portion of the address. (Range: 0-64)
dscp – DSCP traffic class. (Range: 0-63)