C613-50170-01 Rev B
Command Reference for x510 Series
1583
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
6 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
NAMED
IP
V
6
HARDWARE
ACL: TCP
OR
UDP
ENTRY
)
Once you have configured the ACL, use the
command to apply this ACL to a port, VLAN or QoS class-map. Note
that the ACL will only apply to incoming data packets.
You can use ACLs to redirect packets, by sending them to the CPU, the mirror port,
or a specific VLAN on a specific port. Use such ACLs with caution. They could
prevent control packets from reaching the correct destination, such as EPSR
healthcheck messages and VCStack messages.
Examples
To add a filter entry that blocks all SSH traffic from network 2001:0db8::0/64 to the
hardware IPv6 access-list named “my-acl”, use the commands:
awplus#
configure terminal
awplus(config)#
ipv6 access-list my-acl
awplus(config-ipv6-hw-acl)#
deny tcp 2001:0db8::0/64 any eq 22
To add a filter entry that blocks all SSH traffic from network 2001:0db8::0/64 on the
default VLAN (vlan1) to the hardware IPv6 access-list named “my-acl”, use the
commands:
awplus#
configure terminal
awplus(config)#
ipv6 access-list my-acl
awplus(config-ipv6-hw-acl)#
deny tcp 2001:0db8::0/64 any eq 22
vlan 1
To remove an ACL filter entry that blocks all SSH traffic from network 2001:0db8::0/
64 from the hardware IPv6 access-list named “my-acl”, use the commands:
awplus#
configure terminal
awplus(config)#
ipv6 access-list my-acl
awplus(config-ipv6-hw-acl)#
no deny tcp 2001:0db8::0/64 any eq
22
Related
Commands
ipv6 access-list (named IPv6 hardware ACL)
show ipv6 access-list (IPv6 Hardware ACLs)
Command
changes
Version 5.4.6-2.1:
send-to-vlan-port
action parameter added
