Users Guide
9.8(1.0) Introduced on the Z9100–ON.
9.0.2.0 Introduced on the S6000.
8.4.2.0 Introduced on the S-Series.
8.2.1.0 Introduced on the E-Series ExaScale.
7.8.1.0 Introduced on the C-Series.
7.4.1.0 Introduced on the E-Series TeraScale.
Usage
Information
When all sequence numbers have been exhausted, this feature permits re-assigning new sequence
number to entries of an existing access-list.
seq
Assign a sequence number to a deny or permit the filter in an IPv6 access list while creating the filter.
Syntax
seq sequence-number {deny | permit} {ipv6-protocol-number | icmp | ip | tcp
| udp} {source address mask | any | host ipv6-address} {destination address
| any | host ipv6-address} [operator port [port]] [count [byte]] | [log]
[monitor]
To delete a filter, use the no seq sequence-number command.
Parameters
sequence-
number
Enter a number from 0 to 4294967290.
deny Enter the keyword deny to configure a filter to drop packets meeting this
condition.
permit Enter the keyword permit to configure a filter to forward packets meeting this
criteria.
ipv6-protocol-
number
Enter an IPv6 protocol number. The range is 0 to 255.
icmp Enter the keyword icmp to configure an Internet Control Message Protocol
version 6 filter.
ipv6 Enter the keyword ipv6 to configure any Internet Protocol version 6 filter.
tcp Enter the keyword tcp to configure a Transmission Control protocol filter.
udp Enter the keyword udp to configure a User Datagram Protocol filter.
source address
Enter the IPv6 address of the network or host from which the packets were sent in
the x:x:x:x::x format followed by the prefix length in the /x format. The range is /0
to /128. The :: notation specifies successive hexadecimal fields of zero.
mask
Enter a network mask in /prefix format (/x).
any Enter the keyword any to specify that all routes are subject to the filter.
host
ipv6-
address
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x
format. The :: notation specifies successive hexadecimal fields of zero.
operator (OPTIONAL) Enter one of the following logical operands:
● eq = equal to
● neq = not equal to
● gt = greater than
● lt = less than
● range = inclusive range of ports (you must specify two ports for the port
parameter.)
204 Access Control Lists (ACL)










