PLANET XGS3-24042 - Manual (Page 955)

47-21
[no] {deny | permit} udp { > | any-source | {host-source
}} [s-port { > | range }]
{ > | any-destination | {host-destination }} [d-port
{ | range }] [dscp ] [flow-label ][time-range
]
[no] {deny | permit} {sPrefixlen> | any-source | {host-source
}} {dPrefixlen> | any-destination | {host-destination <dIPv6Addr>}}
[dscp <dscp>] [flow-label ][time-range <time-range-name>]
[no] {deny | permit} {sPrefixlen> | any-source | {host-source >}}
{> | any-destination | {host-destination <dIPv6Addr>}} [dscp ]
[flow-label ] [time-range]
Function:
Create an extended nomenclature IPv6 access control rule for specific IPv6 protocol.
Parameter:
is the source IPv6 address; <sPrefixlen> is the length of the IPv6 address prefix, the
range is 1～128; <dIPv6Addr> is the destination IPv6 address; <dPrefixlen> is the length of the
IPv6 address prefix, the range is 1～128; <igmp-type>, type of the IGMP; , icmp type;
, icmp protocol number; , IPv6 priority ,the range is 0～63; , value
of the flow label, the range is 0～1048575; syn,ack,urg,rst,fin,psh,tcp label position; ,
source port number, the range is 0～65535; , the down boundary of source port;
, the up boundary of source port; , destination port number, the range is 0～
65535; , the down boundary of destination port; , the up boundary of
destination port. , the IPv6 next-header. , time range name.
Command Mode:
IPv6 nomenclature extended access control list mode
Default:
No access control list configured.
Example:
Create an extended access control list named udpFlow, denying the igmp packets while allowing
udp packets with destination address 2001:1:2:3::1 and destination port 32.
Switch(config)#ipv6 access-list extended udpFlow
Switch(Config-IPv6-Ext-Nacl-udpFlow)#deny igmp any any-destination
Switch(Config-IPv6-Ext-Nacl-udpFlow)#permit udp any-source host-destination 2001:1:2:3::1
dPort 32