beautypg.com

Ipv6 access-list standard filter) – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 970

background image

IPv6 Software Access Control List (ACL) Commands

Software Reference for x310 Series Switches

37.18

AlliedWare Plus

TM

Operating System - Version 5.4.4C

C613-50046-01 REV A

(ipv6 access-list standard filter)

Use this ACL filter to add a filter entry for an IPv6 source address and prefix length to the
current standard IPv6 access-list. If a sequence number is specified, the new entry is
inserted at the specified location. Otherwise, the new entry is added at the end of the
access-list.

The no variant of this command removes a filter entry for an IPv6 source address and
prefix from the current standard IPv6 access-list. You can specify the filter entry for
removal by entering either its sequence number, or its filter entry profile.

Syntax

[icmp]

[>] {deny|permit}

{<ipv6-source-address/prefix-length>|any}

no

{deny|permit}

{<ipv6-source-address/prefix-length>|any}

no <sequence-number>

Mode

IPv6 Standard ACL Configuration

Default

Any traffic controlled by a software ACL that does not explicitly match a filter is denied.

Usage

The filter entry will match on any IPv6 packet that has the specified IPv6 source address
and prefix length. The parameter any may be specified if an address does not matter.

Examples

To add an ACL filter entry with sequence number 5 that will deny any IPv6 packets to the
standard IPv6 access-list named my-list, enter the commands:

Parameter

Description

<sequence-number>

<1-65535>
The sequence number for the filter entry of the selected
access control list.

deny

Specifies the packets to reject.

permit

Specifies the packets to accept.

<ipv6-source-
address/prefix-
length
>

IPv6 source address and prefix-length in the form X:X::X:X/P.

any

Any IPv6 source host address.

Note

Software ACLs will deny access unless explicitly permitted by an ACL action.

awplus#

configure terminal

awplus(config)#

ipv6 access-list standard my-list

awplus(config-ipv6-std-acl)#

5 deny any