Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2(1) (OL-16599-01, March 2009)

Send comments to [e-mail]
6-63
Cisco Nexus 5000 Series Command Reference
OL-16599-01
Chapter 6 Security Commands
permit (IPv6)
permit (IPv6)
To create an IPv6 ACL rule that permits traffic matching its conditions, use the permit command. To
remove a rule, use the no form of this command.
General Syntax
[sequence-number] permit protocol source destination [dscp dscp] [flow-label flow-label-value]
[fragments] [log] [time-range time-range-name]
no permit protocol source destination [dscp dscp] [flow-label flow-label-value] [fragments] [log]
[time-range time-range-name]
no sequence-number
Internet Control Message Protocol
[sequence-number | no] permit icmp source destination [icmp-message] [dscp dscp]
[flow-label flow-label-value] [fragments] [log] [time-range time-range-name]
Internet Protocol v6
[sequence-number] permit ipv6 source destination [dscp dscp] [flow-label flow-label-value]
[fragments] [log] [time-range time-range-name]
Stream Control Transmission Protocol
[sequence-number | no] permit sctp source [operator port [port] | portgroup portgroup]
destination [operator port [port] | portgroup portgroup] [dscp dscp]
[flow-label flow-label-value] [fragments] [log] [time-range time-range-name]
Transmission Control Protocol
[sequence-number] permit tcp source [operator port [port] | portgroup portgroup] destination
[operator port [port] | portgroup portgroup] [dscp dscp] [flow-label flow-label-value]
[fragments] [log] [time-range time-range-name] [flags] [established]
User Datagram Protocol
[sequence-number | no] permit udp source [operator port [port] | portgroup portgroup]
destination [operator port [port] | portgroup portgroup] [dscp dscp]
[flow-label flow-label-value] [fragments] [log] [time-range time-range-name]