ACL Configuration
402
ipv6 access-list
<num-ext>
{deny | permit} tcp
{{
<sIPv6Prefix/sPrefixlen>
}
|
any-source
|
{host-source
<sIPv6Addr>
}} [s-port {<
sPort
> |
range
<sPortMin>
<sPortMax>
}]
{{
<
dIPv6Prefix/dPrefixlen>
}
|
any-destination
|
{host-destination
<dIPv6Addr>
}} [dPort {<
dPort>
|
range
<dPortMin> <dPortMax>
}] [syn | ack | urg |
rst | fin | psh] [dscp
<dscp>
] [flow-label
<flowlabel>
][time-range
<time-range-name>
]
ipv6 access-list
<num-ext>
{deny | permit} udp
{{
<sIPv6Prefix/sPrefixlen>
}
|
any-source
|
{host-source
<sIPv6Addr>
}} [s-port {
<sPort>
|
range
<sPortMin>
<sPortMax>
}]
{{
<dIPv6Prefix/dPrefixlen>
} | any-destination |
{host-destination
<dIPv6Addr>
}} [dPort {
<dPort>
|
range
<dPortMin> <dPortMax>
}] [dscp
<dscp>
]
[flow-label
<
flowlabel
>][time-range
<time-range-name>
]
ipv6 access-list
<num-ext>
{deny | permit}
<next-header>
{
<sIPv6Prefix/sPrefixlen>
|
any-source
|
{host-source
<sIPv6Addr>
}}
{
<dIPv6Prefix/dPrefixlen>
|
any-destination
|
{host-destination
<dIPv6Addr>
}} [dscp
<dscp>
]
[flow-label
<fl>
][time-range
<time-range-name>
]
no ipv6 access-list
<num>
access-list.
（
12
）
Configuring a standard IPv6 access-list based on
nomenclature
a. Create a standard IPv6 access-list based on nomenclature
Command
Explanation
Global Mode
ipv6 access-list standard
<name>
no ipv6 access-list standard
<name>
Creates
a
standard
IP
access-list
based
on
nomenclature;
the
no
command
delete
the
name-based standard IPv6
access-list.