Access Control Lists
7-10
7
Web – Specify the action (i.e., Permit or Deny). Select the address type (Any or
IPv6-prefix). If you select “IPv6-prefix,” enter a subnet address and prefix length. Set
any other required criteria, such as next header, DSCP, or flow label. Then click Add.
Figure 7-6 ACL Configuration - Extended IPv6
CLI – This example adds three rules:
1. Accepts any incoming packets for the destination 2009:DB9:2229::79/48.
2. Allows packets to any destination address when the DSCP value is 5.
3. Allows any packets sent to the destination 2009:DB9:2229::79/48 when the flow
label is 43.
Console(config-ext-ipv6-acl)#permit 2009:DB9:2229::79/48 26-9
Console(config-ext-ipv6-acl)#permit any dscp 5
Console(config-ext-ipv6-acl)#permit 2009:DB9:2229::79/48 flow-label 43
Console(config-ext-ipv6-acl)#
To Next Page
Loading...
