C613-50631-01 Rev A Command Reference for IE340 Series 2096
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV6 SOFTWARE ACCESS CONTROL LIST (ACL) COMMANDS
(IPV6 ACCESS-LIST EXTENDED TCP UDP FILTER)
Mode IPv6 Extended ACL Configuration
Default Any traffic controlled by a software ACL that does not explicitly match a filter is
denied.
Usage notes The filter entry will match on any packet that has the specified source and
destination IPv6 addresses and the specified TCP or UDP source and destination
port. The parameter any may be specified if an address does not matter.
NOTE: Software ACLs will deny access unless explicitly permitted by an ACL action.
Examples To add a new filter entry with sequence number 5 to the access-list named
my-list to reject TCP packets from 2001:0db8::0/64 port 10 to 2001:0db8::f/64
port 20, use the following commands:
awplus# configure terminal
awplus(config)# ipv6 access-list extended my-list
awplus(config-ipv6-ext-acl)# 5 deny tcp 2001:0db8::0/64 eq 10
2001:0db8::f/64 eq 20
To add a new filter entry with sequence number 5 to the extended IPv6 access-list
named my-list to reject UDP packets from 2001:0db8::0/64 port 10 to
2001:0db8::f/ 64 port 20, use the following commands:
awplus# configure terminal
awplus(config)# ipv6 access-list extended my-list
awplus(config-ipv6-ext-acl)# 5 deny udp 2001:0db8::0/64 eq 10
2001:0db8::f/64 eq 20
To remove the filter entry with sequence number 5to the extended IPv6 access-list
named my-list, use the commands:
awplus# configure terminal
awplus(config)# ipv6 access-list extended my-list
awplus(config-ipv6-ext-acl)# no 5
Related
commands
ipv6 access-list extended (named)
show ipv6 access-list (IPv6 Software ACLs)
show running-config
<ipv6-
destination-
address/prefix>
IPv6 destination address, or local address.
The IPv6 address uses the format X:X::X:X/Prefix-Length. The
prefix-length is usually set between 0 and 64.
<destport> The destination port number, specified as an integer
between 0 and 65535.
log Log the results.
Parameter Description