beautypg.com

Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 941

background image

IPv6 Hardware Access Control List (ACL) Commands

Software Reference for x310 Series Switches

C613-50046-01 REV A

AlliedWare Plus

TM

Operating System - Version 5.4.4C

36.9

Mode

IPv6 Hardware ACL Configuration

Default

Any traffic on an interface controlled by a hardware ACL that does not explicate match a
filter is permitted.

Examples

To specify a hardware IPv6 access-list named my-acl1 and add an ACL filter entry that
blocks all ICMP6 echo requests, enter the commands:

To specify a hardware IPv6 access-list named my-acl2 and add an ACL filter entry that
blocks all ICMP6 echo requests on the default VLAN (vlan1), enter the following
commands:

To remove an ACL filter entry that blocks all ICMP6 echo requests from he hardware IPv6
access-list named my-acl1, enter the following commands:

Validation

Commands

show ipv6 access-list (IPv6 Hardware ACLs)

Related Commands

ipv6 access-list (named)
(ipv6 access-list named protocol filter)
(ipv6 access-list named TCP UDP filter)
ipv6 traffic-filter
show ipv6 access-list (IPv6 Hardware ACLs)

vlan

This parameter can be used in either single or
double-tagged VLAN networks. It is the
conventional VLAN tag (VID). In a double-
tagged network it is sometimes referred to as
the STAG.

<1-4094>

The VLAN VID.

Parameter(cont.)

Description(cont.)

awplus#

configure terminal

awplus(config)#

ipv6 access-list my-acl1

awplus(config-ipv6-hw-acl)#

deny icmp any any icmp-type 128

awplus#

configure terminal

awplus(config)#

ipv6 access-list my-acl2

awplus(config-ipv6-hw-acl)#

deny icmp any any icmp-type 128
vlan 1

awplus#

configure terminal

awplus(config)#

ipv6 access-list my-acl1

awplus(config-ipv6-hw-acl)#

no deny icmp any any icmp-type 128