CLI Guide

Layer 2 Switching Commands 566
– Burst-size – the committed burst size in Kilobytes.
Default Configuration
An implicit deny all condition is added by the system after the last MAC or
IP/IPv6 access group if no route-map is configured on the interface.
Command Mode
IPv6-Access-List Configuration mode
User Guidelines
A rule may either deny or permit traffic according to the specified
classification fields. At a minimum, either the every keyword or the protocol,
source address, and destination address values must be specified. The source
and destination IPv6 address fields may be specified using the keyword any to
indicate a match on any value in that field. The remaining command
parameters are all optional, but the most frequently used parameters appear
in the same relative order as shown in the command format. An IPv6 ACL
implicitly includes the EtherType in the match criteria. The assign-queue
parameter allows specification of a particular hardware queue for handling
traffic that matches this rule. The assign-queue parameter is valid only for a
permit rule. The command is enhanced to accept the optional time-range
parameter. The time-range parameter allows imposing a time limitation on
the IPv6 ACL rule as defined by the parameter time-range-name. If a time
range with the specified name does not exist, and the IPv6 ACL containing
this ACL rule is applied to an interface or bound to a VLAN, then the ACL
rule is applied immediately. If a time range with the specified name exists,
and the IPv6 ACL containing this ACL rule is applied to an interface or
bound to a VLAN, then the ACL rule is applied when the time-range with a
specified name becomes active. The ACL rule is removed when the time-
range with a specified name becomes inactive.
Users are permitted to add rules, but if a packet does not match any user-
specified rules, the packet is dropped by the implicit “deny all” rule.
In order to provide the greatest amount of flexibility in configuring ACLs, the
permit/deny syntax allows combinations of matching criteria that may not
make sense when applied in practice.
Any – is equivalent to ::/0 for IPv6 access lists.