Edge-Core ECS4620-28P Cli Reference Manual page 407

next-header – Identifies the type of header immediately following the IPv6
header. (Range: 0-255)
time-range-name - Name of the time range. (Range: 1-16 characters)
Default Setting
None
Command Mode
Extended IPv6 ACL
Command Usage
◆
All new rules are appended to the end of the list.
◆
Optional internet-layer information is encoded in separate headers that may be
placed between the IPv6 header and the upper-layer header in a packet. There
are a small number of such extension headers, each identified by a distinct Next
Header value. IPv6 supports the values defined for the IPv4 Protocol field in RFC
1700, including these commonly used headers:
0 : Hop-by-Hop Options
6 : TCP Upper-layer Header
17 : UDP Upper-layer Header
43 : Routing
44 : Fragment
51 : Authentication
50 : Encapsulating Security Payload
60 : Destination Options
Example
This example accepts any incoming packets if the destination address is
2009:DB9:2229::79/8.
Console(config-ext-ipv6-acl)#permit 2009:DB9:2229::79/8
Console(config-ext-ipv6-acl)#
This allows packets to any destination address when the DSCP value is 5.
Console(config-ext-ipv6-acl)#permit any dscp 5
Console(config-ext-ipv6-acl)#
This allows any packets sent to the destination 2009:DB9:2229::79/48 when the
next header is 43. "
Console(config-ext-ipv6-acl)#permit 2009:DB9:2229::79/48 next-header 43
Console(config-ext-ipv6-acl)#
– 407 –
Chapter 10
| Access Control Lists
(RFC 2460)
(RFC 1700)
(RFC 1700)
(RFC 2460)
(RFC 2460)
(RFC 2402)
(RFC 2406)
(RFC 2460)
IPv6 ACLs