Dasan V8102 - Ipv6 Access List Zebos for TCP

User Manual UMN:CLI
V8102
259
tos {<0-255> | range <0-255>
<0-255>} | pkt-size {lt <0-65535>
| gt <0-65535> | range <0-
65535> <0-65535>) | fragments |
log | interface {in | out} [{tengi-
gabitethernet IFPORT | gpon
IFPORT | channelgroup IFPORT
| vlan VLANID}]
icmp-type: the actual ICMP value
label: Identifies an application.
precedence: Identifies a packet filter precedence level.
tos: Type of service (ToS) value to filter packets.
pkt-size: Identifies packet size.
gt: packet size less than or greater than specified val-
ue.
lt: packet size less than or greater than specified value.
(0-65535: packet size)
fragments: An ACL applies to the non-initial fragment of
packet.
log: logs the results.
interface: the name of the input or output interface.
no ipv6 access-list zebos
WORD {deny | permit} icmp
{SOUR_ADDR |
SOUR_ADDR_RANGE | any}
{DES_ADDR |
DES_ADDR_RANGE | any}
[{icmp-type ICMP-TYPE | label
<1-65535> | precedence <0-7> |
tos {<0-255> | range <0-255>
<0-255>} | pkt-size {lt <0-65535>
| gt <0-65535> | range <0-
65535> <0-65535> | fragments |
log | interface {in | out} [{tengi-
gabitethernet IFPORT | gpon
IFPORT | channelgroup IFPORT
| vlan VLANID}]
Deletes the configured ZeBos extanded ACL entry.
7.18.10.2 IPv6 Access List ZeBos for TCP
To create an access-list (ACL) to filter packets specific to the TCP protocol, use the fol-
lowing command.
Command
Mode
Description
ipv6 access-list zebos WORD
{deny | permit} tcp
{SOUR_ADDR |
SOUR_ADDR_RANGE | any}
[{eq | lt | gt | ne} <0-65535> |
range <0-65535> <0-65535>]
{DES_ADDR |
DES_ADDR_RANGE | any} [{eq |
lt | gt | ne} <0-65535> | range
<0-65535> <0-65535>]
Global
Specifies a deny or permit statement of the Zebos ex-
tanded ACL to filter packets specific to the TCP proto-
col.
WORD: access-list name
deny: specifies route to deny.
permit: Specified route to permit.
SOUR_ADDR: source IPv6 address to match
(X:X::X:X/M)
SOUR_ADDR_RANGE: source IPv6 address range to
match (X:X::X:X X:X::X:X)
DES_ADDR: destication IPv6 address to match
(X:X::X:X/M)
DES_ADDR_RANGE: destication IPv6 address range
to match (X:X::X:X X:X::X:X)
ipv6 access-list zebos WORD
{deny | permit} tcp
{SOUR_ADDR |
SOUR_ADDR_RANGE | any}