A
CCESS
C
ONTROL
L
ISTS
7-12
Web – Specify the action (i.e., Permit or Deny). Select the address type
(Any or IPv6-prefix). If you select “IPv6-prefix,” enter a subnet address
and prefix length. Set any other required criteria, such as next header,
DSCP, or flow label. Then click Add.
Figure 7-6 ACL Configuration - Extended IPv6
CLI – This example adds three rules:
1. Accepts any incoming packets for the destination 2009:DB9:2229::79/
48.
2. Allows packets to any destination address when the DSCP value is 5.
3. Allows any packets sent to the destination 2009:DB9:2229::79/48
when the flow label is 43.
Console(config-ext-ipv6-acl)#permit 2009:DB9:2229::79/48 23-12
Console(config-ext-ipv6-acl)#permit any dscp 5
Console(config-ext-ipv6-acl)#permit 2009:DB9:2229::79/48
flow-label 43
Console(config-ext-ipv6-acl)#