DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
21
3-5 ipv6 access-list
This command is used to create or modify an IPv6 ACL. This command will enter into the IPv6 access-list configuration
mode. Use the no command to remove an IPv6 access-list.
ipv6 access-list {
name
}
no ipv6 access-list {
name
}
Parameters
3-6 permit | deny (ipv6 access-list)
Use the
permit
command to add a permit entry. Use the
deny
command to add a deny entry. Use the no command to
remove an entry.
Extended IPv6 ACL:
[
sn
] {permit | deny}
protocol
{
source-ipv6-prefix/prefix-length
| host
source-ipv6-address
| any} {
destination-ipv6-
prefix/prefix-length
| host
destination-ipv6-address
| any} [dscp
dscp
] [flow-label
flow-label
] [
fragments
] [time-
range
time-range-name
]
Example
This example shows how to use the extended IP ACL. The purpose is to deny Telnet
access from the host, with the IP address 192.168.4.12, to any host in the network
192.168.1.0 and to permit any others.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#ip access-list extended Ext-ip
DXS-3600-32S(config-ext-nacl)#deny tcp host 192.168.4.12 192.168.1.0 0.0.255.255 eq telnet
DXS-3600-32S(config-ext-nacl)#permit ip any any
DXS-3600-32S(config-ext-nacl)#end
DXS-3600-32S#show access-list
Extended IP access list 3999 Ext-ip
10 deny tcp host 192.168.4.12 192.168.1.0 0.0.255.255 eq telnet
20 permit ip any any
DXS-3600-32S#
name
Specifies the name of the IP access-list to be configured. The name can be up to 32
characters long.
Default
None.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12
Usage Guideline
Extended IPv6 ACL only filters the IPv6 packet. The name must be unique among all
(including MAC, IP, IPv6 or Expert) access-lists and the first character of name must
be a letter.
Example
This example shows how to create an IPv6 ACL:
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#ipv6 access-list ext_ipv6
DXS-3600-32S(config-ipv6-nacl)#end
DXS-3600-32S#show access-list
Extended IP access list 3999 Ext-ip
10 deny tcp host 192.168.4.12 192.168.1.0 0.0.0.255 eq telnet
20 permit ip any any
Extended IPv6 access list ext_ipv6
DXS-3600-32S#
Содержание DXS-3600-16S
Страница 1: ...CLI Reference Guide Product Model DXS 3600 Series Layer 2 3 Managed 10GbE Switch Release 1 10 ...
Страница 232: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 224 ...
Страница 301: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 293 ...
Страница 349: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 341 ...
Страница 494: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 486 ...
Страница 564: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 556 ...
Страница 649: ...DXS 3600 Series 10GbE Layer 2 3 Switch CLI Reference Guide 641 ...