Users Guide

byte (Optional) Count bytes the filter processes.
dscp value (Optional) Permit a packet based on the DSCP values, from 0 to 63.
fragment (Optional) Use ACLs to control packet fragments.
log (Optional) Enables ACL logging. Information about packets that match an ACL rule are logged.
Default Not configured
Command Mode IPV4-ACL
Usage
Information
OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes
increment. The no version of this command removes the filter.
Example
OS10(config)# ip access-list testflow
OS10(conf-ipv4-acl)# permit udp any any capture session 1
Supported
Releases
10.2.0E or later
permit (IPv6)
Configures a filter to allow packets with a specific IPv6 address.
Syntax
permit [protocol-number | icmp | ipv6 | tcp | udp] [A::B | A::B/x | any |
host ipv6-address] [A::B | A:B/x | any | host ipv6-address] [capture |
count | dscp value | fragment | log]
Parameters
protocol-number (Optional) Enter the protocol number identified in the IPv6 header, from 0 to
255.
icmp (Optional) Enter the ICMP address to permit.
ipv6 (Optional) Enter the IPv6 address to permit.
tcp (Optional) Enter the TCP address to permit.
udp (Optional) Enter the UDP address to permit.
A::B Enter the IPv6 address in hexadecimal format separated by colons.
A::B/x Enter the number of bits that must match the IPv6 address.
any (Optional) Enter the keyword any to specify any source or destination IP address.
host ip-address (Optional) Enter the IPv6 address to use a host address only.
capture (Optional) Capture packets the filter processes.
count (Optional) Count packets the filter processes.
byte (Optional) Count bytes the filter processes.
dscp value (Optional) Permit a packet based on the DSCP values, from 0 to 63.
fragment (Optional) Use ACLs to control packet fragments.
log (Optional) Enables ACL logging. Information about packets that match an ACL rule are logged.
Default Not configured
Command Mode IPV6-ACL
Usage
Information
OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes
increment. The no version of this command removes the filter.
Example
OS10(config)# ipv6 access-list ipv6test
OS10(conf-ipv6-acl)# permit udp any any capture session 1
Supported
Releases
10.2.0E or later
1494 Access Control Lists