3. One or more deny/permit list entries (ACEs) — one entry per line.
NotesElement
Alphanumeric; up to 64 characters, including spaces.Identifier
Allows up to 100 alphanumeric characters, including spaces. (If any spaces are
used, the remark in a pair of single or double quotes.)
Remark
A remark is associated with a particular ACE and has the same sequence number
as the ACE. (One remark is allowed per ACE.) See “Attaching a remark to an
ACE” (page 91).
The maximum number of ACEs supported by the switch is up to 3072 for IPv6 and
IPv4 ACEs. The maximum number of ACEs applied to an IP routing interface or
Maximum ACEs per switch
port depends on the concurrent resource usage by multiple configured features.
For more information, use the show <qos|access-list> resources
command or see “Monitoring shared resources” (page 108).
4. Implicit deny: Where an ACL is applied to an interface, it denies any packets that do not have
a match with any of the ACEs explicitly configured in its list. The implicit deny does not appear
in ACL configuration listings but always functions when the switch uses an ACL to filter packets.
(You cannot delete the implicit deny, but you can supersede it with a permit ipv6 any
any ACE.)
Individual ACEs in an IPv6 ACL include:
• Optional remark statements
• A permit/deny statement
• Source and destination IPv6 addressing
• Choice of IPv6 criteria
• Optional ACL log command (for deny or permit entries)
Configuring and assigning an ACL 75
To Next Page
Loading...
