C613-50631-01 Rev A Command Reference for IE340 Series 2058
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV6 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
IPV
6 ACCESS-LIST (NAMED IPV6 HARDWARE ACL)
ipv6 access-list (named IPv6 hardware ACL)
Overview Use this command to either create a new IPv6 hardware access-list, or to select an
existing IPv6 hardware access-list in order to apply a filter entry to it.
Use the no variant of this command to delete an existing IPv6 hardware access-list.
NOTE: Before you can delete an access-list, you must first remove it from any interface
it is assigned to.
Syntax
ipv6 access-list <ipv6-access-list-name>
no ipv6 access-list <ipv6-access-list-name>
Mode Global Configuration
Default Any traffic on an interface controlled by a hardware ACL that does not explicitly
match a filter is permitted.
Usage notes Use IPv6 hardware named access-lists to control the transmission of IPv6 packets
on an interface, and restrict the content of routing updates. The switch stops
checking the IPv6 hardware named access-list when a match is encountered.
This command moves you to the (config-ipv6-hw-acl) prompt for the selected IPv6
hardware named access-list number. From there you can configure the filters for
this selected IPv6 hardware named access-list.
Once you have configured the ACL, use the ipv6 traffic-filter or the match
access-group command to apply this ACL to a port, VLAN or QoS class-map. Note
that the ACL will only apply to incoming data packets.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
Examples To create an IPv6 access-list named “my-ipv6-acl”, use the commands:
awplus# configure terminal
awplus(config)# ipv6 access-list my-ipv6-acl
awplus(config-ipv6-hw-acl)#
To delete the IPv6 access-list named “my-ipv6-acl”, use the commands:
awplus# configure terminal
awplus(config)# no ipv6 access-list my-ipv6-acl
Related
commands
(named IPv6 hardware ACL: ICMP entry)
Parameter Description
<ipv6-access-list-name> Specify an IPv6 access-list name.