Allied Telesis AlliedWare Plus - Page 1970

C613-50100-01 REV C Command Reference for x930 Series 1970
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IPV6 SOFTWARE ACCESS CONTROL LIST (ACL) COMMANDS
IPV
6 ACCESS-LIST EXTENDED (NAMED)
Example 1
[creating a list]
To add a new filter to the access-list named my-list that will reject incoming
ICMP packets from 2001:0db8::0/64 to 2001:0db8::f/64, use the commands:
awplus# configure terminal
awplus(config)# ipv6 access-list extended my-list
awplus(config-ipv6-ext-acl)# icmp 2001:0db8::0/64
2001:0db8::f/64
Example 2
[adding to a list]
To insert a new filter at sequence number 5 of the access-list named my-listthat
will accept ICMP type 8 packets from the 2001:0db8::0/64 network to the
2001:0db8::f/64 network, use the commands:
awplus# configure terminal
awplus(config)# ipv6 access-list extended my-list
awplus(config-ipv6-ext-acl)# 5 icmp 2001:0db8::0/64
2001:0db8::f/64
Example 3 [list
with filter]
To create the access-list named TK to deny TCP protocols, use the commands:
awplus# configure terminal
awplus(config)# ipv6 access-list extended TK deny tcp any eq 14
any lt 12 log
Related
Commands
ipv6 access-list extended proto
(ipv6 access-list extended IP protocol filter)
(ipv6 access-list extended TCP UDP filter)
show ipv6 access-list (IPv6 Software ACLs)
show running-config