SNR S2940-8G-v2, Руководство по настройке

Страница: 291 / 420

SNR S2940-8G-v2 Switch Configuration Guide
ACL Configuration
iii. Exit name-based standard IP ACL configuration mode
Command Explanation
Standard IPv6 ACL Mode
exit Exits name-based standard IPv6 ACL con-
figuration mode.
(m) Configuring an name-based extended IPv6 access-list
i. Create an extended IPv6 access-list basing on nomenclature
Command Explanation
Global Mode
ipv6 access-list extended <name>
no ipv6 access-list extended <name> Creates an extended IPv6 access-list bas-
ing on nomenclature; the no command
deletes the name-based extended IPv6
access-list.
ii. Specify multiple permit or deny rules
Command Explanation
Extended IPv6 ACL Mode
[no] { deny | permit } icmp { {
<sIPv6Prefix/sPrefixlen> } | any-source
| { host-source <sIPv6Addr> } } {
<dIPv6Prefix/dPrefixlen> | any-destination |
{ host-destination <dIPv6Addr> } } [<icmp-
type> [<icmp-code>]] [dscp <dscp>] [flow-label
<flowlabel>] [time-range <time-range-name>]
Creates an extended name-based ICMP
IPv6 access rule; the no form command
deletes this name-based extended IPv6 ac-
cess rule.
[no] { deny | permit } tcp {
<sIPv6Prefix/sPrefixlen> | any-source |
{ host-source <sIPv6Addr> } } [s-port {
<sPort> | range <sPortMin> <sPortMax> } ]
{
<dIPv6Prefix/dPrefixlen> | any-destination
| { host-destination <dIPv6Addr> } } [d-port {
<dPort> | range <dPortMin> <dPortMax> } ]
[syn | ack | urg | rst | fin | psh] [dscp <dscp>]
[flow-label <fl>] [time-range<time-range-name>]
Creates an extended name-based TCP
IPv6 access rule; the no form command
deletes this name-based extended IPv6 ac-
cess rule.
[no] { deny | permit } udp {
<sIPv6Prefix/sPrefixlen> | any-source |
{ host-source <sIPv6Addr> } } [s-port {
<sPort> | range <sPortMin> <sPortMax> } ]
{
<dIPv6Prefix/dPrefixlen> | any-destination
| { host-destination <dIPv6Addr> } } [d-port {
<dPort> | range <dPortMin> <dPortMax> } ]
[dscp <dscp>] [flow-label <fl>] [time-range<time-
range-name>]
Creates an extended name-based UDP
IPv6 access rule; the no form command
deletes this name-based extended IPv6 ac-
cess rule.
291