Allied Telesis x510-28GPX, Справочник по командам

Страница: 1582 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1582
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
6 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
NAMED
IP
V
6
HARDWARE
ACL: TCP
OR
UDP
ENTRY
)
Mode IPv6 Hardware ACL Configuration (accessed by running the command ipv6
access-list (named IPv6 hardware ACL) )
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
Usage To use this command, first run the command ipv6 access-list (named IPv6
hardware ACL) and enter the desired access-list name. This changes the prompt to
awplus(config-ipv6-hw-acl)#.
Then use this command (and the other “named IPv6 hardware ACL: entry”
commands) to add filter entries. You can add multiple filter entries to an ACL.
If you specify a sequence number, the new entry is inserted at the specified
location. If you do not specify a sequence number, the switch puts the entry at the
end of the ACL and assigns it the next available multiple of 10 as its sequence
number.
host <ip-addr>
Match a single destination host with
the IP address given by
<ip-addr> in
dotted decimal notation.
< ip-addr >/
< prefix >
Match any destination IP address
within the specified subnet. Specify
the subnet by entering the IPv4
address, then a forward slash, then
the prefix length.
< ip-addr >
< reverse-mask >
Match any destination IP address
within the specified subnet. Specify
the subnet by entering a reverse
mask in dotted decimal format. For
example, entering “192.168.1.1
0.0.0.255” is the same as entering
192.168.1.1/24.
< dest-ports >
Match destination TCP or UDP port numbers. Port numbers are
specified as integers between 0 and 65535. You can specify one or
more port numbers as follows:
eq <0-65535>
Match a single port number.
lt <0-65535>
Match all port numbers that are less
than the specified port number.
gt <0-65535>
Match all port numbers that are
greater than the specified port
number.
ne <0-65535>
Match all port numbers except the
specified port number.
range < start-port >
< end-port >
Match a range of port numbers.
vlan <1-4094>
The VLAN to match against. The ACL will match against the
specified ID in the packet’s VLAN tag.
Parameter Description