Ipv6 Acls; In This Chapter - Dell PowerConnect B-RX Configuration Manual

IPv6 Access Control Lists (ACLs)

In this chapter

IPv6 ACLs

Brocade supports IPv6 Access Control Lists (ACLs), which you can use for traffic filtering. You can
configure up to 100 IPv6 ACLs.
An IPv6 ACL is composed of one or more conditional statements that pose an action (permit or
deny) if a packet matches a specified source or destination prefix. There can be up to 1024
statements per device.
In ACLs with multiple statements, you can specify a priority for each statement.The specified
priority determines the order in which the statement appears in the ACL. The last statement in each
IPv6 ACL is an implicit deny statement for all packets that do not match the previous statements in
the ACL.
You can configure an IPv6 ACL on a global basis, then apply it to the incoming IPv6 packets on
specified interfaces. You can apply only one IPv6 ACL to an interface's incoming traffic. When an
interface sends or receives an IPv6 packet, it applies the statements within the ACL in their order of
appearance to the packet. As soon as a match occurs, the BigIron RX takes the specified action
(permit or deny the packet) and stops further comparison for that packet.
NOTE
IPv6 ACLs are supported on inbound traffic and are implemented in hardware, making it possible
for the BigIron RX to filter traffic at line-rate speed on 10 Gigabit interfaces.
Brocade's IPv6 ACLs enable traffic filtering based on the following information:
•
•
•
•
•
BigIron RX Series Configuration Guide
53-1001810-01
•
IPv6 ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1185
•
Using IPv6 ACLs as input to other features . . . . . . . . . . . . . . . . . . . . . . . 1186
•
Configuring an IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1186
•
Applying an IPv6 ACL to an interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1195
•
Adding TCP flags to an IPv6 ACL entry . . . . . . . . . . . . . . . . . . . . . . . . . . . 1195
•
Adding a comment to an IPv6 ACL entry . . . . . . . . . . . . . . . . . . . . . . . . . 1195
•
Displaying ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1197
IPv6 protocol
Source IPv6 address
Destination IPv6 address
IPv6 message type
Source TCP or UDP port (if the IPv6 protocol is TCP or UDP)
Chapter
47
1185