beautypg.com

Mac access-list – Allied Telesis AT-S95 CLI (AT-8000GS Series) User Manual

Page 34

background image

Page 34

Allied Telesis
AT-8000GS Command Line Interface User’s Guide

User Guidelines

IPv6 Syntax — The 128-bit IPv6 address format is divided into eight groups of four hexadecimal digits.

Abbreviation of this format is done by replacing a group of zeros with double colons. The IPv6 address
representation can be further simplified by suppressing the leading zeros.

All different IPv6 address formats are acceptable for insertion, yet for display purposes, the system displays

the most abbreviated form, which replaces groups of zeros with double colons and removes the leading
zeros.

IPv6 Prefixes — While Unicast IPv6 addresses written with their prefix lengths are permitted, in practice their

prefix lengths are always 64 bits and therefore are not required to be expressed. Any prefix that is less than
64 bits is a route or address range that is summarizing a portion of the IPv6 address space.

For every assignment of an IP address to an interface, the system runs the Duplicate Address Detection

algorithm to ensure uniqueness.

An intermediary transition mechanism is required for IPv6-only nodes to communicate with IPv6 nodes over

an IPv4 infrastructure. The tunneling mechanism implemented is the Intra-Site Automatic Tunnel Addressing
Protocol (ISATAP). This protocol treats the IPv4 network as a virtual IPv6 local-link, with each IPv4 address
mapped to a Link Local IPv6 address.

Examples

The following example sets the conditions to deny a packet to pass an IPv6 Access List acl1.

mac access-list

The mac access-list Global Configuration mode command defines a Layer 2 Access List and places the device in
MAC-Access List Configuration mode. Use the no form of this command to remove the Access List.

Syntax

mac access-list access-list-name

no mac access-list access-list-name

Parameters

access-list-name — Name of the MAC-Access List.

Default Configuration

No MAC-Access List is defined.

Command Mode

Global Configuration mode

User Guidelines

MAC ACLs are defined by a unique name. An IPv4 ACL, IPv6 ACL and MAC ACL cannot share the same name.

Switch(config)# ipv6 access-list acl1

Switch(config-ipv6-acl)# deny-tcp 2001:0DB8:0300:0201::/64 any any 80