D-Link DXS-1210-12TC Reference Manual page 53

This example shows how to create two entries for an IPv6 standard access-list named "ipv6-std-
control". These entries are: permit IP packets destined to network ff02::0:2/16, and permit IP packets
destined to host ff02::1:2.
Switch# configure terminal
Switch(config)#ipv6 access-list ipv6-std-control
Switch(config-ipv6-acl)# rule permit any ff02::0:2/16
Switch(config-ipv6-acl)# rule permit any host ff02::1:2
Switch(config-ipv6-acl)#
4-16
This command is used to define the rule for packets that will be permitted or denied. Use the no form
of this command to remove an entry
rule [SEQUENCE-NUMBER] {permit | deny} {any | host SRC-MAC-ADDR | SRC-MAC-ADDR
SRC-MAC-WILDCARD} {any | host DST-MAC-ADDR | DST-MAC-ADDR DST-MAC-WILDCARD}
[ethernet-type TYPE MASK [cos VALUE] [vlan VLAN-ID] [time-range PROFILE-NAME]
no SEQUENCE-NUMBER
Parameters
SEQUENCE-NUMBER
any
host SRC-MAC-ADDR
SRC-MAC-ADDR SRC-MAC-
WILDCARD
host DST-MAC-ADDR
DST-MAC-ADDR DST-MAC-
WILDCARD
ethernet-typeTYPE MASK
cos VALUE
vlan VLAN-ID
time-range PROFILE-NAME
Default
None.
Command Mode
MAC Access-list Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
DXS-1210 Series Smart Managed Switch CLI Reference Guide
permit | deny (mac access-list)
Specifies the sequence number. The range is from 1 to 65535. The
lower the number is, the higher the priority of the permit/deny rule.
Specifies any source MAC address or any destination MAC address.
Specifies a specific source host MAC address.
Specifies a group of source MAC addresses by using a wildcard
bitmap. The bit corresponding to the bit value 1 will be ignored. The bit
corresponding to the bit value 0 will be checked.
Specifies a specific destination host MAC address.
Specifies a group of destination MAC addresses by using a wildcard
bitmap. The bit corresponding to the bit value 1 will be ignored. The bit
corresponding to the bit value 0 will be checked.
(Optional) Specifies that the Ethernet type which is a hexadecimal
number from 0 to FFFF or the name of an Ethernet type which can be
one of the following: aarp, appletalk, decnet-iv, etype-6000, etype-
8042, lat, lavc-sca, mop-console, mop-dump, vines-echo, vines-ip,
xns-idp., arp.
(Optional) Specifies the priority value of 0 to 7.
(Optional) Specifies the VLAN-ID.
(Optional) Specifies the name of time period profile associated with the
accesslist delineating its activation period
50