Accton Technology ES4626 - Manual (Page 771)

771
}} [ []] [dscp ] [flow-label ]
[no] {deny | permit} tcp {/sPrefixlen> | any | {host }}
[s-port ] { | any-destination | {host-destination
}} [d-port ] [syn | ack | urg | rst | fin | psh] [dscp ]
[flow-label ]
[no] {deny | permit} udp {/sPrefixlen> | any | {host }}
[s-port ] { | any-destination | {host-destination
}} [d-port ] [dscp ] [flow-label ]
[no] {deny | permit} {/sPrefixlen> | any | {host
}} { | any-destination | {host-destination
}} [dscp ] [flow-label ]
Function: Create an extended nomenclature IPv6 access control rule for specific IPv6
protocol.
Parameter: is the source IPv6 address;<sPrefixlen> is the length of the
IPv6 address prefix,the range is 1 ～ 128; is the destination IPv6
address;<dPrefixlen> is the length of the IPv6 address prefix,the range is 1 ～
128;<igmp-type>,type of the igmp;,icmp type;,icmp protocol
number;,IPv6 priority ,the range is 0～63;,value of the flow label,the range
is 0 ～ 1048575;syn,ack,urg,rst,fin,psh,tcp label position;,source port
number,the range is 0～65535;,destination port number, the range is 0～
65535;
Command Mode: IPv6 nomenclature extended access control list mode
Default:
No access control list configured
Example: Create an extended access control list named udpFlow, denying the igmp
packets while allowing udp packets with destination address 2001:1:2:3::1 and
destination port 32.
Switch(Config)#ipv6 access-list extended udpFlow
Switch(Config-Ext-Nacl-udpFlow)#ipv6 access-list 110 deny igmp any any-destination
Switch(Config-Ext-Nacl-udpFlow)#ipv6 access-list 110 permit udp any host-destination
2001:1:2:3::1 dPort 32
18.2.2.24 permit | deny(ipv6 standard)
Command: [no] {deny | permit} {{/sPrefixlen>} | any | {host
}}
Function: Create a standard nomenclature IPv6 access control rule; the “no” form of this
command deletes the nomenclature standard IPv6 access control rule.
Parameter:
is the prefix of the source IPv6 address,<sPrefixlen> is the