Table of Contents
Advertisement
Command Reference Guide
deny <protocol> <source> <destination>
Use the deny command to configure the extended Internet Protocol version 6 (IPv6) access control list
(ACL) to deny specified packets entry into the routing system. This command provides traffic matching
based on the IPv6 header field. Use the no form of this command to remove the deny parameter from the
IPv6 ACL.
Syntax Description
<protocol>
<source>
<destination>
Default Values
By default, all AOS IPv6 security features are disabled, and there are no configured IPv6 ACLs.
Command History
Release 18.1
60000CRG0-35E
Specifies the IPv6 data protocol ahp, esp, gre, or a specific protocol. Range is
0 to 255. The keyword ipv6 can optionally be used to match any IPv6 traffic.
Extension header values are not allowed.
Specifies the source used for IPv6 packet matching. Sources can be expressed
in one of three ways:
1. Using the keyword any to match any IPv6 address.
2. Using host <ipv6 address> to specify a single host address. IPv6
addresses should be expressed in colon hexadecimal format (X:X:X:X::X).
For example, 2001:DB8:1::1.
3. Using <ipv6 prefix/prefix-length> to specify a source address to match. IPv6
prefixes should be expressed in colon hexadecimal format (X:X::X/<Z>).
For example, 2001:DB8:3F::/64. The prefix length (<Z>) is an integer with a
value between 0 and 128.
Specifies the destination used for IPv6 packet matching. Destinations can be
expressed in one of three ways:
1.
Using the keyword any to match any IPv6 address.
2. Using host <ipv6 address> to specify a single host address. IPv6
addresses should be expressed in colon hexadecimal format (X:X:X:X::X).
For example, 2001:DB8:1::1.
3. Using <ipv6 prefix/prefix-length> to specify a destination address to match.
IPv6 prefixes should be expressed in colon hexadecimal format
(X:X::X/<Z>). For example, 2001:DB8:3F::/64. The prefix length (<Z>) is
an integer with a value between 0 and 128.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
IPv6 Access Control List Command Set
3166
Advertisement
Table of Contents
