Permit, Deny (Extended Ipv6 Acl) - SMC Networks TigerStack II SMC8848M Management Manual

A C
CCESS ONTROL
Related Commands
access-list ipv6 (23-10)

permit, deny (Extended IPv6 ACL)

This command adds a rule to an Extended IPv6 ACL. The rule sets a filter
condition for packets with specific destination IP addresses, next header
type, or flow label. Use the no form to remove a rule.
Syntax
[no] {permit | deny}
{any | destination-ipv6-address[/prefix-length]}
[next-header next-header] [dscp dscp] [flow-label flow-label]
• any – Keyword indicating any IPv6 destination address (an
abbreviation for the IPv6 prefix ::/0).
• destination-ipv6-address - An IPv6 destination address. The address
must be formatted according to RFC 2373 "IPv6 Addressing
Architecture," using 8 colon-separated 16-bit hexadecimal values.
One double colon may be used in the address to indicate the
appropriate number of zeros required to fill the undefined fields.
(The switch only checks the first 64 bits of the destination address.)
• prefix-length - A decimal value indicating how many contiguous bits
(from the left) of the address comprise the prefix (i.e., the network
portion of the address).
• dscp – DSCP priority level. (Range: 0-63)
• flow-label – A label for packets belonging to a particular traffic "flow"
for which the sender requests special handling by IPv6 routers, such
as non-default quality of service or "real-time" service (see RFC
2460). (Range: 0-16777215)
• next-header – Identifies the type of header immediately following the
IPv6 header. (Range: 0-255)
Default Setting
None
Command Mode
Extended IPv6 ACL
23-12
L C
IST OMMANDS