SNR S2940-8G-v2, Configuration Manual

Page: 290 / 420

SNR S2940-8G-v2 Switch Configuration Guide
ACL Configuration
(k) Configuring a numbered extensive IPv6 access-list
Command Explanation
Global Mode
ipv6 access-list <num-ext> { deny | permit } icmp { {
<sIPv6Prefix/sPrefixlen> } | any-source | { host-source
<sIPv6Addr> } } { <dIPv6Prefix/dPrefixlen> | any-destination
| { host-destination <dIPv6Addr> } } [<icmp-type> [<icmp-
code>]] [dscp <dscp>] [flow-label <fl>][time-range<time-
range-name>]
ipv6 access-list <num-ext> { deny | permit } tcp { {
<sIPv6Prefix/<sPrefixlen> } | any-source | { host-source
<sIPv6Addr> } } [s-port { <sPort> | range <sPortMin> <sPort-
Max> } ] { { < dIPv6Prefix/<dPrefixlen> } | any-destination
| { host-destination <dIPv6Addr> } } [dPort { <dPort> |
range <dPortMin> <dPortMax> } ] [syn | ack | urg | rst
| fin | psh] [dscp <dscp>] [flow-label <flowlabel>][time-
range<time-range-name>]
ipv6 access-list <num-ext> { deny | permit } udp { {
<sIPv6Prefix/<sPrefixlen> } | any-source | { host-source
<sIPv6Addr> } } [s-port { <sPort> | range <sPortMin> <sPort-
Max> } ] { { <dIPv6Prefix/<dPrefixlen> } | any-destination
| { host-destination <dIPv6Addr> } } [dPort { <dPort> |
range <dPortMin> <dPortMax> } ] [dscp <dscp>] [flow-label
<flowlabel>][time-range<time-range-name>]
ipv6 access-list <num-ext> { deny | permit } <next-header>
{ <sIPv6Prefix/sPrefixlen> | any-source | { host-source
<sIPv6Addr> } } { <dIPv6Prefix/dPrefixlen> | any-destination
| { host-destination <dIPv6Addr> } } [dscp <dscp>] [flow-
label <fl>][time-range<time-range-name>]
no ipv6 access-list <num> Creates a numbered extended
IPv6 access-list, if the access-
list already exists, then a rule will
add to the current access-list;
the no command deletes a num-
bered standard IPv6 access-list.
(l) Configuring a standard IPv6 access-list based on nomenclature
i. Create a standard IPv6 access-list based on nomenclature
Command Explanation
Global Mode
ipv6 access-list standard <name>
no ipv6 access-list standard <name> Creates a standard IP access-list based on
nomenclature; the no command delete the
name-based standard IPv6 access-list.
ii. Specify multiple permit or deny rules
Command Explanation
Standard IPv6 ACL Mode
[no] { deny | permit } { { <sIPv6Prefix/sPrefixlen>
} | any-source | { host-source <sIPv6Addr> } } Creates a standard name-based IPv6 ac-
cess rule; the no form command deletes the
name-based standard IPv6 access rule.
290