Cisco Catalyst 2960 Series User Manual

PurposeCommand or Action
•
(Optional) Enter log to cause an logging message to be
sent to the console about the packet that matches the
entry. Enter log-input to include the input interface in
the log entry. Logging is supported only for router
ACLs.
•
(Optional) Enter routing to specify that IPv6 packets be
routed.
•
(Optional) Enter sequence value to specify the sequence
number for the access list statement. The acceptable
range is from 1 to 4294967295
•
(Optional) Enter time-range name to specify the time
range that applies to the deny or permit statement.
(Optional) Define a TCP access list and the access conditions.{deny|permit} tcp
Step 5
Example:
{deny | permit} tcp {source-ipv6-prefix/prefix-length
| any | hostsource-ipv6-address}
Enter tcp for Transmission Control Protocol. The parameters
are the same as those described in Step 3, with these additional
optional parameters:
[operator
• ack—Acknowledgment bit set.
[port-number]]{destination-ipv6-prefix/prefix-length
| any |hostdestination-ipv6-address}
• established—An established connection. A match occurs
if the TCP datagram has the ACK or RST bits set.
[operator [port-number]][ack] [dscp
value][established] [fin]
[log][log-input] [neq {port |protocol}] [psh]
[range{port | protocol}] [rst][routing] [sequence
• fin—Finished bit set; no more data from sender.
value]
[syn] [time-range name][urg]
• neq {port | protocol}—Matches only packets that are
not on a given port number.
• psh—Push function bit set.
• range {port | protocol}—Matches only packets in the
port number range.
• rst—Reset bit set.
• syn—Synchronize bit set.
• urg—Urgent pointer bit set.
(Optional) Define a UDP access list and the access conditions.{deny|permit} udp
Step 6
Example:
{deny | permit} udp {source-ipv6-prefix/prefix-length
| any | hostsource-ipv6-address}
Enter udp for the User Datagram Protocol. The UDP
parameters are the same as those described for TCP, except
that the operator [port]] port number or name must be a UDP
port number or name, and the established parameter is not
valid for UDP.
[operator
[port-number]]{destination-ipv6-prefix/prefix-length
| any | hostdestination-ipv6-address}
[operator [port-number]][dscp value] [log][log-input]
[neq {port |protocol}] [range {port |protocol}]
[routing][sequence value][time-range name]
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
204
Configuring IPv6 ACLs

Cisco Catalyst 2960 Series Specifications

General

Layer	Layer 2
Power over Ethernet (PoE)	Available on some models
RAM	128 MB
Flash Memory	32 MB
MAC Address Table Size	8000
Operating Temperature	0°C to 45°C (32 to 113°F)
Ports	24 or 48 x 10/100/1000