Dell PowerConnect B-RX Configuration Manual page 1251

BigIron RX(config)# ipv6 access-list netw
BigIron RX(config-ipv6-access-list-netw)# permit icmp 2000:2383:e0bb::/64
2001:3782::/64
BigIron RX(config-ipv6-access-list-netw)# deny ipv6 host 2000:2383:e0ac::2 host
2000:2383:e0aa:0::24
BigIron RX(config-ipv6-access-list-netw)# deny udp any any
BigIron RX(config-ipv6-access-list-netw)# permit ipv6 any any
The first condition permits ICMP traffic from hosts in the 2000:2383:e0bb::x network to hosts in
the 2001:3782::x network.
The second condition denies all IPv6 traffic from host 2000:2383:e0ac::2 to host
2000:2383:e0aa:0::24.
The third condition denies all UDP traffic.
The fourth condition permits all packets that are not explicitly denied by the other entries. Without
this entry, the ACL would deny all incoming IPv6 traffic on the ports to which you assigned the ACL.
The following commands apply the ACL "netw" to the incoming traffic on port 1/2 and to the
incoming traffic on port 4/3.
BigIron RX(config)# int eth 1/2
BigIron RX(config-if-1/2)# ipv6 traffic-filter netw in
BigIron RX(config-if-1/2)# exit
BigIron RX(config)# int eth 4/3
BigIron RX(config-if-4/3)# ipv6 traffic-filter netw in
BigIron RX(config)# write memory
Here is another example of an ACL.
BigIron RX(config)# ipv6 access-list nextone
BigIron RX(config-ipv6-access-list rtr)# deny tcp 2001:1570:21::/24
2001:1570:22::/24
BigIron RX(config-ipv6-access-list rtr)# deny udp any range 5 6 2001:1570:22::/24
BigIron RX(config-ipv6-access-list rtr)# permit ipv6 any any
BigIron RX(config-ipv6-access-list rtr)# write memory
The first condition in this ACL denies TCP traffic from the 2001:1570:21::x network to the
2001:1570:22::x network.
The next condition denies UDP packets from any source with source UDP port in ranges 5 to 6 and
whose destination is to the 2001:1570:22::/24 network.
The third condition permits all packets containing source and destination addresses that are not
explicitly denied by the first two. Without this entry, the ACL would deny all incoming IPv6 traffic on
the ports to which you assign the ACL.
A show running-config command displays the following.
BigIron RX(config)# show running-config
ipv6 access-list rtr
deny tcp 2001:1570:21::/24 2001:1570:22::/24
deny udp any range 5 6 2001:1570:22::/24
permit ipv6 any any
A show ipv6 access-list command displays the following.
BigIron RX Series Configuration Guide
53-1001986-01
Configuring an IPv6 ACL
47
1179