ADTRAN AOS Version R10.1.0 Command Reference Manual page 3164

Command Reference Guide
Step 3:
Create an IPv6 ACL to permit or deny specified IPv6 traffic by using either the ipv6 access-list extended
or ipv6 access-list standard command. Standard IPv6 ACLs match based on the source IPv6 address of
the packet. Extended IPv6 ACLs match based on the source and destination of the packet. Refer to the
command ipv6 access-list extended <ipv6 acl name> on page 1181
standard <ipv6 acl name> on page 1183
ways:
1. Using the keyword any to match any IPv6 address.
2. Using host <ipv6 address> to specify a single host address.
3. Using the <ipv6 prefix/prefix-length> to specify a source IPv6 address to match.
Step 4:
Apply the created IPv6 ACP to an interface. To assign an IPv6 ACP to an interface, enter the interface
configuration mode for the desired interface and enter ipv6 access-policy <ipv6 acp name>. The
following example assigns IPv6 ACP UNTRUSTED to the Ethernet 0/1 interface:
(config)#interface ethernet 0/1
(config-eth 0/1)#ipv6 access-policy UNTRUSTED
The following commands are common to multiple command sets and are covered in a centralized section
of this guide. For more information, refer to the sections listed below:
cross-connect on page 67
do on page 71
exit on page 73
interface on page 74
The following are commands used to configure an extended IPv6 ACL. Extended IPv6 ACL
configuration includes specifying an IPv6 ACL action, a protocol, a packet source, a source port, a packet
destination, and a destination port. These commands are described in this section in alphabetical order.
deny <protocol> <source> <destination> on page 3166
deny [tcp | udp] <source> <source port> <destination> <destination port> <tcp flags> on
page 3168
deny icmpv6 <source> <destination> on page 3172
permit <protocol> <source> <destination> on page 3176
permit [tcp | udp] <source> <source port> <destination> <destination port> <tcp flags> on
page 3178
permit icmpv6 <source> <destination> on page 3182
remark <remark> on page 3186
60000CRG0-35E
for more information. Sources can be expressed in one of three
Copyright © 2012 ADTRAN, Inc.
IPv6 Access Control List Command Set
or the command ipv6 access-list
3164