Reference Guide

Table Of Contents
sequence numbers of ACL rules in the ACL and change the order in which entries are applied. This
command is not saved in startup configuration and is not displayed in running configuration.
Note
If the generated sequence number exceeds the maximum sequence number, the ACL rule
creation fails and an informational message is displayed.
Default 10
Format ipv6 access-list resequence {name| id } starting-sequence-
number increment
Mode Global Config
Parameter Description
starting-
sequence-
number
The sequence number from which to start. The range is 1–2147483647. The default is 10.
increment The amount to increment. The range is 1–2147483647. The default is 10.
{deny | permit} (IPv6)
This command creates a new rule for the current IPv6 access list. A rule may either deny or permit
trac according to the specified classification fields. At a minimum, either the every keyword or the
protocol, source address, and destination address values must be specified. The source and destination
IPv6 address fields may be specified using the keyword any to indicate a match on any value in that
field. The remaining command parameters are all optional, but the most frequently used parameters
appear in the same relative order as shown in the command format.
Format
{deny | permit} {every | {{icmpv6 | ipv6 | tcp | udp | 0-255}
{source-ipv6-prefix/prefix-length | any | host source-ipv6-
address} [{range {portkey | startport} {portkey | endport} |
{eq | neq | lt | gt} {portkey | 0-65535} ] {destination-ipv6-
prefix/prefix-length | any | host destination-ipv6-address}
[{range {portkey | startport} {portkey | endport} | {eq | neq
| lt | gt} {portkey | 0-65535}] [flag [+fin | -fin] [+syn | -
syn] [+rst | -rst] [+psh | -psh] [+ack | -ack] [+urg | -urg]
[established]] [flow-label value] [icmp-type icmp-type [icmp-
code icmp-code] | icmp-message icmp-message] [routing]
[fragments] [sequence sequence-number] [dscp dscp]}} [log]
[assign-queue queue-id] [rate-limit rate burst-size]
Mode IPv6-Access-List Config
Note
An implicit deny all IPv6 rule always terminates the access list.
The time-range parameter allows imposing time limitation on the IPv6 ACL rule as defined by the
parameter time-range-name. If a time range with the specified name does not exist and the IPv6 ACL
containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied
Quality of Service Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 643