C613-50100-01 REV C Command Reference for x930 Series 1953
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IPV6 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(IPV6 ACCESS-LIST NAMED PROTOCOL FILTER)
(ipv6 access-list named protocol filter)
Overview Use this ACL filter to add a filter entry for an IPv6 source and destination address
and prefix, with an IP protocol type specified, to the current named IPv6 access-list.
If you specify a sequence number, the new entry is inserted at the specified
location. Otherwise, the new entry is added at the end of the access-list.
Note that specifying the send-to-cpu parameter could result in EPSR healthcheck
messages and other control packets being dropped.
The no variant of this command removes a filter entry for an IPv6 source and
destination address and prefix, with an IP protocol type specified, from the current
named IPv6 access-list. You can specify the filter entry for removal by entering
either its sequence number, or its filter entry profile.
Syntax
[<sequence-number>
{deny|permit|send-to-cpu|send-to-mirror|copy-to-cpu|
copy-to-mirror} proto <ip-protocol>
{<ipv6-source-prefix/prefix-length>|
<ipv6-source-address> <ipv6-source-wildcard>|
host <ipv6-source-host>|any}
{<ipv6-destination-prefix/prefix-length>|
<ipv6-destination-address> <ipv6-destination-wildcard>|
host <ipv6-destination-host>|any} [vlan <1-4094>]
no [<sequence-number>]
{deny|permit|send-to-cpu|send-to-mirror|copy-to-cpu|
copy-to-mirror} proto <ip-protocol>
{<ipv6-source-prefix/prefix-length>|
<ipv6-source-address> <ipv6-source-wildcard>|
host <ipv6-source-host>|any}
{<ipv6-destination-prefix/prefix-length>|
<ipv6-destination-address> <ipv6-destination-wildcard>|
host <ipv6-destination-host>|any} [vlan <1-4094>]
no [<sequence-number>]
Parameter Description
<sequence-number> The sequence number for the filter entry of the selected access control
list, from 1 to 65535.
deny Specifies packets to reject.
permit Specifies packets to permit.
send-to-cpu Specifies packets to send to the CPU. Specifying this parameter could
result in EPSR healthcheck messages and other control packets being
dropped.
send-to-mirror Specifies packets to send to mirror port.
copy-to-cpu Specifies packets to copy to the CPU.
copy-to-mirror Specifies packets to copy to the mirror port.
To Next Page
Loading...
Need help?
General
