Configuration Guide User guide

BigIron RX Series Configuration Guide 1433
53-1002484-04
IPv6 ACL
E
IPv6 ACL
Commands See ...
ipv6 access-list <acl name> “For ICMP” on page 1292
“For TCP” on page 1292
“For UDP” on page 1292
“For IPv6 and supported protocols other than ICMP,
TCP, or UDP” on page 1291
ipv6 access-list
<name> deny | permit
<ipv6-source-prefix>/<prefix-length> | any
<ipv6-destination-prefix>/<prefix-length> | any
[sequence
<number>]
“For IPv6 and supported protocols other than ICMP,
TCP, or UDP” on page 1291
ipv6 access-list
<name> deny | permit
<ipv6-source-prefix>/<prefix-length> | any
<ipv6-destination-prefix>/<prefix-length> | any
[sequence
<number>] dscp <dscp-value>
“Configuring an IPv6 ACL” on page 1288
permit | deny tcp
<ipv6-source-prefix/prefix-length> | any | host
<source-ipv6_address> [tcp-udp-operator
[source-port-number]]
<ipv6-destination-prefix/prefix-length> | any | host
<ipv6-destination-address> [tcp-udp-operator
[destination-port- number]] [ipv6-operator [
<value>]]
[tcp-operator [
<value>]]
“For TCP” on page 1292
permit | deny
<protocol>
<ipv6-source-prefix/prefix-length> | any | host
<source-ipv6_address>
<ipv6-destination-prefix/prefix-length> | any | host
<ipv6-destination-address> [ipv6-operator [<value>]]
“ACL syntax” on page 1291
permit | deny icmp
<ipv6-source-prefix/prefix-length> | any | host
<source-ipv6_address>
<ipv6-destination-prefix/prefix-length> | any | host
<ipv6-destination-address> [ipv6-operator [<value>]]
[ [
<icmp-type>][<icmp-code>] ] | [<icmp-messge>]
“For ICMP” on page 1292
permit | deny udp
<ipv6-source-prefix/prefix-length> |
any | host
<source-ipv6_address> [tcp-udp-operator
[source port number]]
<ipv6-destination-prefix/prefix-length> | any | host
<ipv6-destination-address> [tcp-udp-operator [destination
port number]] [ipv6-operator [
<value>]]
“For UDP” on page 1292
remark
<comment-text> “Adding a comment to an IPv6 ACL entry” on
page 1298
remark-entry sequence
<sequence number>
<comment-text>
“Adding a comment to an IPv6 ACL entry” on
page 1298
show ipv6 access-list [
<access-list-name>] “Adding a comment to an IPv6 ACL entry” on
page 1298
show running-config “Adding a comment to an IPv6 ACL entry” on
page 1298