Cisco Nexus 7000 Series - Page 593

• IPv6 address group object—You can use an IPv6 address group object to specify a source or destination
argument. Use the object-group ipv6 address command to create and change IPv6 address group
objects. The syntax is as follows:
addrgroup
address-group-name
The following example shows how to use an IPv6 address object group named lab-svrs-1301 to specify the
destination argument:
switch(config-acl)# permit ipv6 any addrgroup lab-svrs-1301
• Address and variable-length subnet mask—You can use an IPv6 address followed by a variable-length
subnet mask (VLSM) to specify a host or a network as a source or destination. The syntax is as follows:
IPv6-address/prefix-len
The following example shows how to specify the source argument with the IPv6 address and VLSM for the
2001:0db8:85a3:: network:
switch(config-acl)# permit udp 2001:0db8:85a3::/48 any
• Host address—You can use the host keyword and an IPv6 address to specify a host as a source or
destination. The syntax is as follows:
host
IPv6-address
This syntax is equivalent to IPv6-address/128.
The following example shows how to specify the source argument with the host keyword and the
2001:0db8:85a3:08d3:1319:8a2e:0370:7344 IPv6 address:
switch(config-acl)# permit icmp host 2001:0db8:85a3:08d3:1319:8a2e:0370:7344 any
• Any address—You can use the any keyword to specify that a source or destination is any IPv6 address.
For examples of the use of the any keyword, see the examples in this section. Each example shows how
to specify a source or destination by using the any keyword.
ICMPv6 Message Types
The icmp-message argument can be one of the following keywords:
• beyond-scope—Destination beyond scope
• destination-unreachable—Destination address is unreachable
• echo-reply—Echo reply
• echo-request—Echo request (ping)
• header—Parameter header problems
• hop-limit—Hop limit exceeded in transit
• mld-query—Multicast Listener Discovery Query
• mld-reduction—Multicast Listener Discovery Reduction
• mld-report—Multicast Listener Discovery Report
• nd-na—Neighbor discovery neighbor advertisements
• nd-ns—Neighbor discovery neighbor solicitations
Cisco Nexus 7000 Series Security Command Reference
567
P Commands
permit (IPv6)