Allied Telesis IE340-20GP - Page 2064

C613-50631-01 Rev A Command Reference for IE340 Series 2064
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV6 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(NAMED IPV6 HARDWARE ACL: ICMP ENTRY)
Examples To add a filter entry to the ACL named “my-acl”, to block ICMP packets sent from
network 2001:0db8::0/64 , use the commands:
awplus# configure terminal
awplus(config)# ipv6 access-list my-acl
awplus(config-ipv6-hw-acl)# deny icmp 2001:0db8::0/64 any
To remove a filter entry from the ACL named “my-acl” that blocks all ICMP packets
sent from network 2001:0db8::0/ 64 , use the commands:
awplus# configure terminal
awplus(config)# ipv6 access-list my-acl
awplus(config-ipv6-hw-acl)# no deny icmp 2001:0db8::0/64 any
To specify an ACL named “my-acl1” and add a filter entry that blocks all ICMP6 echo
requests, enter the commands:
awplus# configure terminal
awplus(config)# ipv6 access-list my-acl1
awplus(config-ipv6-hw-acl)# deny icmp any any icmp-type 128
To specify an ACL named “my-acl2” and add a filter entry that blocks all ICMP6 echo
requests on the default VLAN (vlan1), enter the following commands:
awplus# configure terminal
awplus(config)# ipv6 access-list my-acl2
awplus(config-ipv6-hw-acl)# deny icmp any any icmp-type 128
vlan 1
To remove a filter entry that blocks all ICMP6 echo requests from the ACL named
“my-acl1”, enter the following commands:
awplus# configure terminal
awplus(config)# ipv6 access-list my-acl1
awplus(config-ipv6-hw-acl)# no deny icmp any any icmp-type 128
Related
commands
ipv6 access-list (named IPv6 hardware ACL)
ipv6 traffic-filter
match access-group
show ipv6 access-list (IPv6 Hardware ACLs)
Command
changes
Version 5.5.3-0.1: deny-and-not-cpu action parameter added on x230, x550, x930,
x950, SBx908 GEN2 Series switches
Version 5.5.3-0.1: log parameter added on x220, x320, x530, x550, x950, SBx908
GEN2 Series switches
Version 5.4.7-2.1: send-to-vlan-port action parameter added on GS900MX,
GS980MX, XS900MX, SBx8100, SBx908 GEN2, x950 Series switches
Version 5.4.6-2.1: send-to-vlan-port action parameter added on IX5, x230, x310,
x510, x930 Series switches