beautypg.com

21 permit | deny(ipv6 standard), 22 permit | deny(mac extended), Permit – PLANET WGSW-52040 User Manual

Page 617: Deny, Standard, Mac extended

background image

38-157

Example:

Create an extended access control list named udpFlow, denying the igmp packets while allowing udp packets with

destination address 2001:1:2:3::1 and destination port 32.

Switch(config)#ipv6 access-list extended udpFlow

Switch(Config-IPv6-Ext-Nacl-udpFlow)#deny igmp any any-destination

Switch(Config-IPv6-Ext-Nacl-udpFlow)#permit udp any-source host-destination 2001:1:2:3::1 dPort 32

38.21 permit | deny(ipv6 standard)

Command:

[no] {deny | permit} {{/sPrefixlen>} | any-source | {host-source }}

Function:

Create a standard nomenclature IPv6 access control rule; the no form of this command deletes the nomenclature

standard IPv6 access control rule.

Parameter:

is the prefix of the source IPv6 address, <sPrefixlen> is the length of the IPv6 address prefix, the

valid range is 1~128. is the source IPv6 address.

Command Mode:

Standard IPv6 nomenclature access list mode

Default:

No access list configured by default.

Example:

Permit packets with source address of 2001:1:2:3::1/64 while denying those with source address of 2001:1:2:3::1/48.

Switch(config)#ipv6 access-list standard ipv6Flow

Switch(Config-IPv6-Std-Nacl-ipv6Flow)# permit 2001:1:2:3::1/64

Switch(Config-IPv6-Std-Nacl-ipv6Flow)# deny 2001:1:2:3::1/48

38.22 permit | deny(mac extended)

Command:

[no]{deny|permit} {any-source-mac|{host-source-mac }|{ }}

{any-destination-mac|{host-destination-mac }|{ }} [cos