mac

Commands for ACL
419
from 2003:1:2:3::1/64 pass through the net, and deny all the other packet from the
source address 2003:1:2::1/48 pass through.
Switch (config)#ipv6 access-list 520 permit 2003:1:2:3::1/64
Switch (config)#ipv6 access-list 520 deny 2003:1:2:::1/48
36.15 ipv6 access standard
Command: ipv6 access-list standard <name>
no ipv6 access-list standard <name>
Function: Create a name-based standard IPv6 access list; the “no ipv6 access-list
standard<name>”command deletes the name-based standard IPv6 access list
(including all entries).
Parameter: <name> is the name for access list, the character string length is from 1 to
32.
Command Mode: Global Mode.
Default: No access list is configured by default.
Usage Guide: When this command is run for the first time, only an empty access list
with no entry will be created.
Example: Create a standard IPv6 access list named ip6Flow.
Switch(config)#ipv6 access-list standard ip6Flow
36.16 ipv6 access extended
This command is not supported by switch.
36.17 {ip|ipv6|mac|mac-ip} access-group
Command: {ip|ipv6|mac|mac-ip} access-group <name> {in} [traffic-statistic]
no {ip|ipv6|mac|mac-ip} access-group <name> {in}
Function: Apply an access-list on some direction of port, and determine if ACL rule is
added statistic counter or not by options; the no command deletes access-list binding on
the port.
Parameter: <name> is the name for access list, the character string length is from 1 to
32.
Command Mode: Port Mode
Default: The entry of port is not bound ACL.
Usage Guide: One port can bind ingress rules