Cisco Nexus 7000 Series Command Reference Manual page 593

Hide thumbs Also See for Nexus 7000 Series:

Table of Contents

• IPv6 address group object—You can use an IPv6 address group object to specify a source or destination

argument. Use the object-group ipv6 address command to create and change IPv6 address group

objects. The syntax is as follows:

address-group-name

The following example shows how to use an IPv6 address object group named lab-svrs-1301 to specify the

destination argument:

switch(config-acl)# permit ipv6 any addrgroup lab-svrs-1301

• Address and variable-length subnet mask—You can use an IPv6 address followed by a variable-length

subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:

IPv6-address/prefix-len

The following example shows how to specify the source argument with the IPv6 address and VLSM for the

2001:0db8:85a3:: network:

switch(config-acl)# permit udp 2001:0db8:85a3::/48 any

• Host address—You can use the host keyword and an IPv6 address to specify a host as a source or

destination. The syntax is as follows:

IPv6-address

This syntax is equivalent to IPv6-address/128.

The following example shows how to specify the source argument with the host keyword and the

2001:0db8:85a3:08d3:1319:8a2e:0370:7344 IPv6 address:

switch(config-acl)# permit icmp host 2001:0db8:85a3:08d3:1319:8a2e:0370:7344 any

• Any address—You can use the any keyword to specify that a source or destination is any IPv6 address.

For examples of the use of the any keyword, see the examples in this section. Each example shows how

to specify a source or destination by using the any keyword.

ICMPv6 Message Types

The icmp-message argument can be one of the following keywords:

• beyond-scope—Destination beyond scope

• destination-unreachable—Destination address is unreachable

• echo-reply—Echo reply

• echo-request—Echo request (ping)

• header—Parameter header problems

• hop-limit—Hop limit exceeded in transit

• mld-query—Multicast Listener Discovery Query

• mld-reduction—Multicast Listener Discovery Reduction

• mld-report—Multicast Listener Discovery Report

• nd-na—Neighbor discovery neighbor advertisements

• nd-ns—Neighbor discovery neighbor solicitations

Cisco Nexus 7000 Series Security Command Reference

permit (IPv6)