Ipv6 Access Control List Command Set - ADTRAN AOS Version R10.1.0 Command Reference Manual

Command Reference Guide
IP 6 A
V CCESS
An Internet Protocol version 6 (IPv6) access control list (ACL) is an ordered list of entries used as packet
selectors by an IPv6 access control policy (ACP) in the ADTRAN Operating System (AOS) command line
interface (CLI). ACLs and ACPs work together to regulate IPv6 traffic through the routed network.
There are two types of IPv6 ACLs in AOS: standard and extended. A standard IPv6 ACL allows source
IPv6 address packet patterns only. An extended IPv6 ACL may specify patterns using most fields in the
IPv6 header and the Transmission Control Protocol (TCP) header, User Datagram Protocol (UDP) header,
or Internet Control Message Protocol version 6 (ICMPv6) message type or code. This configuration
command set details the configuration of both standard and extended IPv6 ACLs.
IPv4 ACLs are also supported by AOS, but are explained separately in this document.
Refer to
configuring IPv4 ACLs.
To create a standard IPv6 ACL and activate the Standard IPv6 ACL Configuration mode, enter the ipv6
access-list standard <ipv6 acl name> command at the Global Configuration mode prompt. For example:
>enable
#configure terminal
(config)#ipv6 access-list standard MATCHALLv6
(config-std6-nacl)#
To create an extended IPv6 ACL and activate the Extended IPv6 ACL Configuration mode, enter the ipv6
access-list extended <ipv6 acl name> command at the Global Configuration mode prompt. For example:
>enable
#configure terminal
(config)#ipv6 access-list extended MATCHALLv6
(config-ext6-nacl)#
An IPv6 ACL will remain inactive until it is assigned to an active IPv6 ACP. For more
information on configuring and activating IPv6 ACPs, refer to the
Policy Command Set on page
Technology Review
IPv6 ACPs and ACLs regulate traffic through the routed network. When designing your traffic flow
configuration, it is important to keep the following in mind:
• An IPv6 ACL serves as a packet selector, defining exactly which packets should take the given action.
• An IPv6 ACP defines the action to take on the packets selected by the ACL.
• An IPv6 ACL is inactive until it is assigned to an active IPv6 ACP.
• An IPv6 ACP is inactive until it is assigned to an interface.
60000CRG0-35E
C L
ONTROL IST
IPv4 Access Control List Command Set on page 3126
3192.
Copyright © 2012 ADTRAN, Inc.

IPv6 Access Control List Command Set

C S
OMMAND ET
for more information on
IPv6 Access Control
3162