Mac access-list – Allied Telesis AT-S95 CLI (AT-8000GS Series) User Manual
Page 34

Page 34
Allied Telesis
AT-8000GS Command Line Interface User’s Guide
User Guidelines
•
IPv6 Syntax — The 128-bit IPv6 address format is divided into eight groups of four hexadecimal digits.
Abbreviation of this format is done by replacing a group of zeros with double colons. The IPv6 address
representation can be further simplified by suppressing the leading zeros.
•
All different IPv6 address formats are acceptable for insertion, yet for display purposes, the system displays
the most abbreviated form, which replaces groups of zeros with double colons and removes the leading
zeros.
•
IPv6 Prefixes — While Unicast IPv6 addresses written with their prefix lengths are permitted, in practice their
prefix lengths are always 64 bits and therefore are not required to be expressed. Any prefix that is less than
64 bits is a route or address range that is summarizing a portion of the IPv6 address space.
•
For every assignment of an IP address to an interface, the system runs the Duplicate Address Detection
algorithm to ensure uniqueness.
•
An intermediary transition mechanism is required for IPv6-only nodes to communicate with IPv6 nodes over
an IPv4 infrastructure. The tunneling mechanism implemented is the Intra-Site Automatic Tunnel Addressing
Protocol (ISATAP). This protocol treats the IPv4 network as a virtual IPv6 local-link, with each IPv4 address
mapped to a Link Local IPv6 address.
Examples
The following example sets the conditions to deny a packet to pass an IPv6 Access List acl1.
mac access-list
The mac access-list Global Configuration mode command defines a Layer 2 Access List and places the device in
MAC-Access List Configuration mode. Use the no form of this command to remove the Access List.
Syntax
mac access-list access-list-name
no mac access-list access-list-name
Parameters
•
access-list-name — Name of the MAC-Access List.
Default Configuration
No MAC-Access List is defined.
Command Mode
Global Configuration mode
User Guidelines
MAC ACLs are defined by a unique name. An IPv4 ACL, IPv6 ACL and MAC ACL cannot share the same name.
Switch(config)# ipv6 access-list acl1
Switch(config-ipv6-acl)# deny-tcp 2001:0DB8:0300:0201::/64 any any 80