Users Guide
• If you congure sequence-number, the sequence-number is used as a tie breaker for rules with the same
order.
When you use the log option, the CP processor logs details about the packets that match. Depending on how
many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’
details.
If you congure the sequence-number, the sequence-number is used as a tie breaker for rules with the
same order.
NOTE: When you congure ACL logging and byte counters simultaneously, byte counters may display
an incorrect value. Congure packet counters with logging instead.
Related Commands
• deny — congure a lter to drop packets.
• permit — congure a lter to forward packets.
Extended IPv6 ACL Commands
The following commands congure extended IPv6 ACLs.
deny
Congure a lter that drops IPv6 packets that match the lter criteria.
Syntax
deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp}
To remove this lter, you have two choices:
• Use the no seq sequence-number command syntax if you know the lter’s sequence number
• Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command
Parameters
ip-protocol-number Enter an IPv6 protocol number. The range is 0 to 255.
icmp Enter the keyword icmp to deny Internet Control Message Protocol version 6.
ipv6 Enter the keyword ipv6 to deny any Internet Protocol version 6.
tcp Enter the keyword tcp to deny the Transmission Control protocol.
udp Enter the keyword udp to deny the User Datagram Protocol.
Defaults Not congured.
Command Modes ACCESS-LIST
Command History
This guide is platform-specic. For command information about other platforms, see the relevant Dell Networking
OS Command Line Reference Guide.
Version Description
9.10(0.0) Introduced on the S6100–ON.
9.8(1.0) Introduced on the Z9100–ON.
9.0.2.0 Introduced on the S6000.
224 Access Control Lists (ACL)