Router Access-List6 - Fortinet FortiGate Series Administration Manual

What's new in FortiOS Version 4.0 MR1

router access-list6

FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Variable
backdoor
{enable | disable}
prefix6 <address_ipv6mask> Enter the IP address and netmask that identifies
route-map
<routemap-name_str>
config redistribute6 Variables are the same as for config redistribute
Use this command to add, edit, or delete access lists for IPv6 traffic. Access lists are filters
used by FortiGate unit routing processes. For an access list to take effect, it must be
called by a FortiGate unit routing process (for example, a process that supports RIPng or
OSPF).
Syntax
config router access-list6
edit <access_list_name>
set comments <string>
config rule
edit <access_list_id>
set action {deny | permit}
set exact-match {enable | disable}
set prefix6 { <prefix_ipv6mask> | any }
end
end
Note: The action and prefix keywords are required. The exact-match keyword is
optional.
Variable
edit <access_list_name>
comments <string>
config rule Variables
edit <access_list_id>
action {deny | permit}
exact-match
{enable | disable}
prefix6 {
<prefix_ipv6mask> | any }
Description
Enable or disable the route as a backdoor,
which causes an administrative distance of 200
to be assigned to the route. Backdoor routes are
not advertised to EBGP peers.
the BGP network to advertise.
Specify the name of the route-map that will be
used to modify the attributes of the route before
it is advertised. You must create the route-map
before it can be selected here.
Description
Enter a name for the access list. An access list and
a prefix list cannot have the same name.
Enter a descriptive comment. The max length is
127 characters.
Enter an entry number for the rule. The number
must be an integer.
Set the action to take for this prefix.
By default, access list rules are matched on the
prefix or any more specific prefix. Enable exact-
match to match only the configured prefix.
Enter the prefix for this access list rule, either:
• Type the IP address and netmask.
• Type any to match any prefix.
Dynamic routing for IPv6 traffic
Default
disable
::/0
Null
Default
No default.
No default.
No default.
permit
disable
any
51