Allied Telesis x510-28GPX, Справочник по командам

Страница: 1580 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1580
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
6 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
NAMED
IP
V
6
HARDWARE
ACL: TCP
OR
UDP
ENTRY
)
(named IPv6 hardware ACL: TCP or UDP
entry)
Overview Use this command to add a TCP or UDP filter entry to the current IPv6 hardware
access-list. The access-list will match on TCP or UDP packets that have the specified
source and destination IP addresses and optionally, port values. You can use the
value
any instead of source or destination IP address if an address does not matter.
The no variant of this command removes a filter entry from the current hardware
access-list. You can specify the filter entry for removal by entering either its
sequence number (e.g.
no 100 ), or by entering its filter profile without specifying
its sequence number (e.g. no deny tcp 2001:0db8::0/64 any ).
You can find the sequence number by running the show ipv6 access-list (IPv6
Hardware ACLs) command.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
Syntax
[< sequence-number >] < action > {tcp|udp} <source-addr >
[< source-ports >] <dest-addr> [< dest-ports >] [vlan < 1-4094 >]
no < sequence-number >
no < action > {tcp|udp} <source-addr > [< source-ports >]
<dest-addr> [< dest-ports >] [vlan < 1-4094 >]
Parameter Description
< sequence-

number >
The sequence number for the filter entry of the selected access
control list, in the range 1-65535. If you do not specify a sequence
number, the switch puts the entry at the end of the ACL and
assigns it the next available multiple of 10 as its sequence
number. .
<action>
The action that the switch will take on matching packets:
deny
Reject packets that match the
source and destination filtering
specified with this command.
permit
Permit packets that match the
source and destination filtering
specified with this command.
copy-to-cpu
Send a copy of matching packets to
the CPU.
copy-to-mirror
Send a copy of matching packets to
the mirror port.
Use the
mirror interface command
to configure the mirror port.
send-to-mirror
Send matching packets to the
mirror port.
Use the
mirror interface command
to configure the mirror port.