Brocade Communications Systems ServerIron ADX 12.4.00a Security Manual page 105

Version 12.4.00a
Table of Contents

Advertisement

Syntax: permit | deny <protocol>
For ICMP
Syntax: [no] ipv6 access-list <acl-name>
Syntax: permit | deny icmp <ipv6-source-prefix/prefix-length> | any | host
For TCP
Syntax: [no] ipv6 access-list <acl-name>
Syntax: permit | deny <tcp>
For UDP
Syntax: [no] ipv6 access-list <acl-name>
Syntax: permit | deny <udp>
TABLE 6
Arguments...
ipv6 access-list <acl-name>
permit
deny
icmp
protocol
ServerIron ADX Security Guide
53-1002440-03
<ipv6-source-prefix/prefix-length> | any | host <source-ipv6_address>
<ipv6-destination-prefix/prefix-length> | any | host <ipv6-destination-address>
[ipv6-operator [<value>]] [log]
<source-ipv6_address>
<ipv6-destination-prefix/prefix-length> | any | host <ipv6-destination-address>
[ipv6-operator [<value>]]
[ [<icmp-type>][<icmp-code>] ] | [<icmp-message>] [log]
<ipv6-source-prefix/prefix-length> | any | host <source-ipv6_address> [tcp-udp-operator
[source-port-number]]
<ipv6-destination-prefix/prefix-length> | any | host <ipv6-destination-address>
[tcp-udp-operator [destination-port- number]]
[ipv6-operator [<value>]] [log]
<ipv6-source-prefix/prefix-length> | any | host <source-ipv6_address> [tcp-udp-operator
[source port number]]
<ipv6-destination-prefix/prefix-length> | any | host <ipv6-destination-address>
[tcp-udp-operator [destination port number]]
[ipv6-operator [<value>]] [log]
Syntax Descriptions
Description...
Enables the IPv6 configuration level and defines the name of the IPv6 ACL.
The <acl-name> can contain up to 199 characters and numbers, but
cannot begin with a number and cannot contain any spaces or quotation
marks.
The ACL will permit (forward) packets that match a policy in the access list.
The ACL will deny (drop) packets that match a policy in the access list.
Indicates the you are filtering ICMP packets.
The type of IPv6 packet you are filtering. You can specify a well-known name
for some protocols whose number is less than 255. For other protocols, you
must enter the number. Enter "?" instead of a protocol to list the well-known
names recognized by the CLI. IPv6 protocols include:
AHP – Authentication Header
ESP – Encapsulating Security Payload
IPv6 – Internet Protocol version 6
SCTP – Stream Control Transmission Protocol
3
IACL overview
91

Advertisement

Table of Contents
loading

Table of Contents