Cisco Nexus 7000 Series Security Command Reference - Cisco Nexus 7000 Series Command Reference Manual

D Commands
packet-lengthoperatorpacket-length [packet-length
Command Default
None
Command Modes
IPv6 ACL configuration
Command History
Release
4.1(2)
Usage Guidelines
A newly created IPv6 ACL contains no rules.
When the device applies an IPv6 ACL to a packet, it evaluates the packet with every rule in the ACL. The
device enforces the first rule whose conditions are satisfied by the packet. When the conditions of more than
one rule are satisfied, the device enforces the rule with the lowest sequence number.
This command does not require a license.
Source and Destination
You can specify the source and destination arguments in one of several ways. In each rule, the method you
use to specify one of these arguments does not affect how you specify the other. When you configure a rule,
use the following methods to specify the source and destination arguments:
(Optional) Rule matches only packets that have a
length in bytes that satisfies the condition specified
by the operator and packet-length arguments.
Valid values for the packet-length argument are whole
numbers from 20 to 9210.
The operator argument must be one of the following
keywords:
• eq—Matches only if the packet length in bytes
is equal to the packet-length argument.
• gt—Matches only if the packet length in bytes
is greater than the packet-length argument.
• lt—Matches only if the packet length in bytes
is less than the packet-length argument.
• neq—Matches only if the packet length in bytes
is not equal to the packet-length argument.
• range—Requires two packet-length arguments
and matches only if the packet length in bytes
is equal to or greater than the first packet-length
argument and equal to or less than the second
packet-length argument.
Modification
This command was introduced.

Cisco Nexus 7000 Series Security Command Reference

deny (IPv6)
253