ADTRAN AOS Version R10.1.0 Command Reference Manual page 3172

Command Reference Guide
deny icmpv6 <source> <destination>
Use the deny icmpv6 command to configure the extended Internet Protocol version 6 (IPv6) access control
list (ACL) to deny specified Internet Control Message Protocol version 6 (ICMPv6) packets entry into the
routing system. This command provides traffic matching based on the packet's IPv6 header field and
ICMPv6-specific fields. Use the no form of this command to remove the deny parameter from the IPv6
ACL. Variations of this command include:
deny icmpv6 <source> <destination>
deny icmpv6 <source> <destination> <message name>
deny icmpv6 <source> <destination> <message type> <message code>
Syntax Description
<source>
<destination>
<message name>
60000CRG0-35E
Specifies the source used for IPv6 packet matching. Sources can be expressed
in one of three ways:
1. Using the keyword any to match any IPv6 address.
2. Using host <ipv6 address> to specify a single host address. IPv6
addresses should be expressed in colon hexadecimal format (X:X:X:X::X).
For example, 2001:DB8:1::1.
3. Using <ipv6 prefix/prefix-length> to specify a source address to match. IPv6
prefixes should be expressed in colon hexadecimal format (X:X::X/<Z>).
For example, 2001:DB8:3F::/64. The prefix length (<Z>) is an integer with a
value between 0 and 128.
Specifies the destination used for IPv6 packet matching. Destinations can be
expressed in one of three ways:
1. Using the keyword any to match any IPv6 address.
2. Using host <ipv6 address> to specify a single host address. IPv6
addresses should be expressed in colon hexadecimal format (X:X:X:X::X).
For example, 2001:DB8:1::1.
3. Using <ipv6 prefix/prefix-length> to specify a destination address to match.
IPv6 prefixes should be expressed in colon hexadecimal format
(X:X::X/<Z>). For example, 2001:DB8:3F::/64. The prefix length (<Z>) is
an integer with a value between 0 and 128.
Optional. Specifies the ICMP message type used for matching ICMPv6 packets.
ICMP message names are specified using one of the following keywords:
beyond-scope
dest-unreachable
dhaad-reply
Copyright © 2012 ADTRAN, Inc.
IPv6 Access Control List Command Set
Indicates the destination is unreachable
because it is beyond the scope of the
source address.
Indicates the destination address is
unreachable.
Indicates a home agent address
discovery reply message.
3172