189
destination-ip-mask
—— The destination IP address mask. It is required if you
typed the destination IP address.
s-port
—— The source port number.
d-port
—— The destination port number.
protocol
—— Configure the value of the matching protocol.
Command Mode
Global Configuration Mode
Privilege Requirement
Only Admin, Operator and Power User level users have access to these
commands.
Example
Create an Extended-IP ACL whose ID is 2220, and add Rule 10 for it. In the
rule, the source IP address is 192.168.0.100, the source IP address mask is
255.255.255.0, and the packets match this rule will be forwarded by the
switch:
T1600G-52TS(config)# access-list create 2220
T1600G-52TS(config)# access-list extended 2220 rule 10 permit sip
192.168.0.100 smask 255.255.255.0
24.5 access-list ipv6
Description
The access-list ipv6 command is used to add IPv6 ACL rule. To delete the
corresponding rule, please use no access-list ipv6 command. Standard-IP
ACLs analyze and process data packets based on a series of match
conditions, which can be the source IP addresses and destination IP
addresses carried in the packets, the DSCP and flow-label value, etc.
Syntax
access-list ipv6
acl-id
rule
rule-id
{ deny
|
permit } [dscp
dscp-value
]
[flow-label
flow-label-value
] [ [ sip
source-ip
] sip-mask
source-ip-mask
]
[ [ dip
destination-ip
] dip-mask
destination-ip-mask
] [ s-port
s-port
] [ d-port
d-port
]
no access-list ipv6
acl-id
rule
rule-id
Parameter
acl-id
—— The desired Standard-IP ACL for configuration.
To Next Page
Loading...
Need help?
General