2110
C
139: IP
6 ACL C
HAPTER
V
C
ONFIGURATION
OMMANDS
Table 551 Match criteria and other rule information for advanced IPv6 ACL rules
Parameter
source { source
source-prefix |
source/source-prefix |
any }
destination { dest
dest-prefix |
dest/dest-prefix | any }
dscp dscp
logging
fragment
time-range time-name Specifies the time
If the protocol argument is set to tcp or udp, you may define the parameters in
the following table.
Function
Description
Specifies a source
The source and source-prefix arguments
IPv6 address.
specify an IPv6 source address and its prefix
length in the range 1 to 128.
The any keyword indicates any IPv6 source
address.
Specifies a
The dest and dest-prefix arguments specify a
destination IPv6
destination IPv6 address, and its prefix length
address.
in the range 1 to 128.
The any keyword indicates any IPv6
destination address.
Specifies a DSCP
The dscp argument can be a number in the
preference
range 0 to 63, or in words, af11, af12, af13,
af21, af22, af23, af31, af32, af33, af41,
af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7,
default, or ef.
Specifies to log
The log provides information about ACL rule
matched packets
number, whether packets are permitted or
denied, protocol that IP carries,
source/destination IPv6 address,
source/destination port number, and number
of packets.
Indicates that the
With this keyword not provided, the rule is
rule applies only to
effective to both non-fragments and
non-first fragments
fragments.
The time-name argument comprises 1 to 32
range in which the
characters. It is case insensitive and must start
rule can take effect.
with an English letter. To avoid confusion, this
name cannot be all.