Kontron CP6923, Справочное руководство, Страница: 209 / 480

CP6923 Quality of Service (QoS) Commands
Page 3 - 35 CP6923 CLI Reference Manual
This command fails is an IPv6 ACL by the name
<newname>
already exists.
3.9.3 {deny | permit} (IPv6)
This command creates a new rule for the current IPv6 access list. Each rule is appended to the list of configured
rules for the list.
A rule may either deny or permit traffic according to the specified classification fields. At a minimum, either the
‘every’
keyword or the protocol, source address, and destination address values must be specified. The source
and destination IPv6 address fields may be specified using the keyword
‘any’
to indicate a match on any value in
that field. The remaining command parameters are all optional, but the most frequently used parameters appear in
the same relative order as shown in the command format.
The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches
this rule. The allowed
<queue-id>
value is 0-(n-1), where
n
is the number of user configurable queues available
for the hardware platform. The
assign-queue
parameter is valid only for a permit rule.
For the Broadcom 5650x platform, the
mirror
parameter allows the traffic matching this rule to be copied to the
specified
<slot/port>
, while the redirect parameter allows the traffic matching this rule to be forwarded to the
specified
<slot/port>
. The
assign-queue
and
redirect
parameters are only valid for a
permit
rule.
3.9.4 ipv6 traffic-filter
This command either attaches a specific IPv6 ACL identified by <name> to an interface or associates with a VLAN
ID in a given direction. The <name> parameter must be the name of an existing IPv6 ACL.
An optional sequence number may be specified to indicate the order of this mac access list relative to other IPv6
access lists already assigned to this interface and direction. A lower number indicates higher precedence order. If
a sequence number is already in use for this interface and direction, the specifiedIPv6 access list replaces the
currently attached IPv6 access list using that sequence number. If the sequence number is not specified for this
command, a sequence number that is one greater than the highest sequence number currently in use for this
interface and direction is used.
Format
ipv6 access-list rename <name> <newname>
Mode Global Config
Note: The ‘no’ form of this command is not supported, since the rules within an IPv6 ACL cannot be
deleted individually. Rather, the entire IPv6 ACL must be deleted and respecified.
Note: An implicit ‘deny all’ IPv6 rule always terminates the access list.
Note: The mirror and redirect parameters are not available on the Broadcom 5630x platform.
Format
{deny | permit} {every | {{icmp | igmp | ipv6 | tcp | udp | <number>}[log]
[assign-queue <queue-id>] [{mirror | redirect} <slot/port>]
Mode IPv6-Access-List Config