Reference Guide

immediately. If a time range with specified name exists and the IPv6 ACL containing this ACL rule is
applied to an interface or bound to a VLAN, then the ACL rule is applied when the time-range with
specified name becomes active. The ACL rule is removed when the time-range with specified name
becomes inactive. For information about configuring time ranges, see Time Range Commands for Time-
Based ACLs on page 653.
The assign-queue parameter allows specification of a particular hardware queue for handling trac that
matches this rule. The allowed queue-id value is 0-(n-1), where n is the number of user configurable
queues available for the hardware platform. The assign-queue parameter is valid only for a permit rule.
The permit command’s optional attribute rate-limit allows you to permit only the allowed rate of trac
as per the configured rate in kbps, and burst-size in kbytes.
IPv6 ACLs have the following limitations:
•
Port ranges are not supported for egress IPv6 ACLs.
•
The IPv6 ACL fragment keyword matches only on the first IPv6 extension header (next header code
44). If the fragment header appears in the second or subsequent header, it is not matched.
•
The IPv6 ACL routing keyword matches only on the first IPv6 extension header (next header code
43). If the fragment header appears in the second or subsequent header, it is not matched.
•
The rate-limit command is not supported for egress IPv6 ACLs.
Parameter Description
{deny | permit} Specifies whether the IPv6 ACL rule permits or denies
the matching trac.
Every Specifies to match every packet.
{protocolkey | number} Specifies the protocol to match for the IPv6 ACL rule.
The current list is: icmpv6, ipv6, tcp, and udp.
source-ipv6-prefix/prefix-length | any | host source-
ipv6-address
Specifies a source IPv6 source address and prefix
length to match for the IPv6 ACL rule.
Specifying any implies specifying “::/0 “
Specifying host source-ipv6-address implies
matching the specified IPv6 address.
This source-ipv6-address argument must be in
the form documented in RFC 2373 where the address
is specified in hexadecimal using 16-bit values
between colons.
Quality of Service Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 644