Cisco 300 Series

ACL Commands
OL-32830-01 Command Line Interface Reference Guide 120
4
switchxxxxxx(config-ip-al)# permit tcp 2001:0DB8:0300:0201::/64 any any 80
4.5 permit ( IPv6 )
Use the permit command in Ipv6 Access-list Configuration mode to set permit
conditions (ACEs) for IPv6 ACLs. Use the no form of the command to remove the
access control entry.
Syntax
permit
protocol {any |{source-prefix/length}{any | destination- prefix/length}
[
ace-priority priority][dscp number | precedence number] [ time-range
time-range-name]
[log-input]
permit icmp {any | {source-prefix/length}{any | destination- prefix/length}
{any|icmp-type} {any|icmp-code} [
ace-priority priority][dscp number | precedence
number] [
time-range time-range-name]
[log-input]
permit tcp {any | {source-prefix/length} {any | source-port/port-range}}{any |
destination- prefix/length} {any| destination-port/port-range} [
ace-priority
priority][dscp number | precedence number] [match-all list-of-flags] [
time-range
time-range-name]
[log-input]
permit udp {any | {source-prefix/length}} {any | source-port/port-range}}{any |
destination- prefix/length} {any| destination-port/port-range} [
ace-priority
priority][dscp number | precedence number][
time-range time-range-name]
[log-input]
no permit protocol {any |{source-prefix/length}{any | destination- prefix/length}
[dscp number | precedence number] [
time-range time-range-name]
[log-input]
no permit icmp {any | {source-prefix/length}{any | destination- prefix/length}
{any|icmp-type} {any|icmp-code} [dscp number | precedence number] [
time-range
time-range-name]
[log-input]