284
Switch(config)#ip access-list standard ipFlow
27.13 ipv6 access-list
Command: ipv6 access-list
<num-std>
{deny | permit} {
<sIPv6Prefix/sPrefixlen
> |
any-source | {host-source
<sIPv6Addr>
}}
no ipv6 access-list <
num-std>
Functions:
Creates a numbered standard IP access-list, if the access-list already exists,
then a rule will add to the current access-
list; the ―
no access-list {
<num-std>|<num-ext>
}
―command deletes a numbered standard IP access-list.
Parameters:
<num-std>
is
the list number , list range is between 500
～
599;
<sIPv6Prefix>
is the prefix of the ipv6 source address;
<sPrefixlen >
is the length of
prefix of the ipv6 source address, range is between 1
～
128;
<sIPv6Addr>
is the ipv6
source address.
Command Mode:
Global Mode.
Default:
No access-list configured.
Usage Guide:
Creates a numbered 520 standard IP access-list first time, the following
configuration will add to the current access-list.
Examples:
Creates a numbered 520 standard IP access-list, allow the source packet
from 2003:1:2:3::1/64 pass through the net, and deny all the other packet from the source
address 2003:1:2::1/48 pass through.
Switch (config)#ipv6 access-list 520 permit 2003:1:2:3::1/64
Switch (config)#ipv6 access-list 520 deny 2003:1:2:::1/48
27.14 ipv6 access standard
Command: ipv6 access-list standard
<name>
no ipv6 access-list standard
<name>
Function:
Create a name-
based standard IPv6 access list; the ―
no ipv6 access-list
standard
<name>
‖command deletes the name-based standard IPv6 access list (including
all entries).
Parameter:
<name>
is the name for access list, the character string length is from 1-32.
Command Mode:
Global Mode.
Default:
No access list is configured by default.
Summary of Contents for S6124
Page 311: ...311 Machine...
Page 314: ...314...
