beautypg.com

PLANET XGS3-24040 User Manual

Page 452

background image

Chapter 46 ACL Configuration

46-14

13Configuring an name-based extended IPV6 access-list

a. Create an extended IPV6 access-list basing on nomenclature

Command

Explanation

Global Mode

ipv6 access-list extended

no ipv6 access-list extended

Creates an extended IPV6

access-list basing on

nomenclature; the no

command deletes the

name-based extended IPV6

access-list.


b. Specify multiple permit or deny rules

Command

Explanation

Extended IPV6 ACL Mode

[no] {deny | permit} icmp {{} |

any-source | {host-source }}

{ | any-destination |

{host-destination }} [

[]] [dscp ] [flow-label ]

[time-range ]

Creates an extended

name-based ICMP IPv6

access rule; the no form

command deletes this

name-based extended IPv6

access rule.

[no] {deny | permit} tcp { |

any-source | {host-source }} [s-port

{ | range }]

{ | any-destination |

{host-destination }} [dPort { |

range }] [syn | ack | urg | rst |

fin | psh] [dscp ] [flow-label ]

[time-range ]

Creates an extended

name-based TCP IPV6

access rule; the no form

command deletes this

name-based extended IPV6

access rule.

[no] {deny | permit} udp { |

any-source | {host-source }} [s-port

{ | range }]

{ | any-destination |

{host-destination }} [d-port { |

range }] [dscp ]

[flow-label ] [time-range

]

Creates an extended

name-based UDP IPV6

access rule; the no form

command deletes this

name-based extended IPV6

access rule..

[no] {deny | permit} {

| any-source | {host-source }}

{ | any-destination |

{host-destination }} [dscp ]

[flow-label ] [time-range

Creates an extended

name-based IPV6 access

rule for other IPV6 protocols;

the

no

form command

deletes this name-based