Connectivity Guide
NOTE: The control-plane ACLs support only the eq operator.
Default Not congured
Command Mode IPV4–ACL
Usage Information OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes increment. The
no version of this command removes the lter.
The count, byte, and log options are not supported on the S5148F-ON platform.
Example
OS10(conf-ipv4-acl)# permit tcp any any capture session 1
Supported Releases 10.2.0E or later
permit tcp (IPv6)
Congures a lter to permit TCP packets meeting the lter criteria.
Syntax
permit tcp [A::B | A::B/x | any | host ipv6-address [eq | lt | gt | neq |
range]] [A::B | A:B/x | any | host ipv6-address [eq | lt | gt | neq | range]]
[ack | fin | psh | rst | syn | urg] [capture | count | dscp value | fragment |
log]
Parameters
• A::B — Enter the IPv6 address in hexadecimal format separated by colons.
• A::B/x — Enter the number of bits that must match the IPv6 address.
• any — (Optional) Enter the keyword any to specify any source or destination IP address.
NOTE: The control-plane ACLs do not support the any parameter.
• host ipv6-address — (Optional) Enter the IPv6 address to use a host address only.
• capture — (Optional) Capture packets the lter processes.
• count — (Optional) Count packets the lter processes.
• byte — (Optional) Count bytes the lter processes.
• dscp value — (Optional) Permit a packet based on the DSCP values, from 0 to 63.
• fragment — (Optional) Use ACLs to control packet fragments.
• log — (Optional) Enables ACL logging. Information about packets that match an ACL rule are logged.
Default Not congured
Command Mode IPV6-ACL
Usage Information OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes increment. The
no version of this command removes the lter.
The count, byte, and log options are not supported on the S5148F-ON platform.
Example
OS10(config)# ipv6 access-list ipv6test
OS10(conf-ipv6-acl)# permit tcp any any capture session 1
Supported Releases 10.2.0E or later
920 Access Control Lists