User Manual
UMN:CLI
V8102
257
{<0-255> |
range
<0-255> <0-
255>} |
pkt-size
{
lt
|
gt
} <0-
65535> |
range
<0-65535> <0-
65535> |
fragments
|
log
|
inter-
face
{
in
|
out
} [{
tengigabitether-
net
IFPORT
|
gpon
IFPORT
|
channelgroup
IFPORT
|
vlan
VLANID
}]
7.18.10
IPv6 Access List ZeBos
ipv6 access-list zebos
command to configure an access list for filtering frames that
permit or deny multiple IANA protocols. An access list controls the transmission of pack-
ets on an interface, and restrict the content of routing updates. The switch stops checking
the access list when a match is encountered. Some protocols are identified by name,
such as IP, GRE, or TCP packets. Other are identified by a number in the range of <0-
255>. Use mask to specify a subset of addresses. Use
any
to allow all packets.
To create an IPv6 access-list (ACL) to filter packets, use the following command.
Command
Mode
Description
ipv6 access-list zebos WORD
{
deny
|
permit
} {
ip
|
gre
|
igmp
|
pim
|
rsvp
|
ospf
|
vrrp
|
ipcomp
|
any
| <0-255>}
{
SOURCE_ADDR
|
any
}
{
DESTINATION_ADDR
|
any
}
Global
Specifies a deny or permit statement of the Zebos ex-
tanded ACL with IPv6 addresses.
WORD: access-list name
deny: denies packets if conditions are matched.
permit: permits packets if conditions are matched.
ip: IP packet
gre: Generic Routing Encapsulation packet.
igmp: Internet Group Management Protocol packet
pim: Protocol Independent Multicast packet
rsvp: Resource Reservaion Protocol packet
ospf: Open Shortest Path First packet
vrrp: Virtual Router Redundancy Protocol packet
ipcomp: IP payload compression packet.
any: any protocol packet
0-255: protocol number, instead of a named protocol
SOUR_ADDR: source IPv6 address to match
(X:X::X:X/M)
SOUR_ADDR_RANGE: source IPv6 address range to
match (X:X::X:X X:X::X:X)
DES_ADDR: destination IPv6 address to match
(X:X::X:X/M)
DES_ADDR_RANGE: destination IPv6 address range
to match (X:X::X:X X:X::X:X)
label: Identifies an application.
precedence: Identifies a packet filter precedence level.
tos: Type of service (ToS) used to filter packets. (0-255:
ipv6 access-list zebos WORD
{
deny
|
permit
} {
ip
|
gre
|
igmp
|
pim
|
rsvp
|
ospf
|
vrrp
|
ipcomp
|
any
}
{
SOUR_ADDR
|
SOUR_ADDR_RANGE
|
any
}
{
DES_ADDR
|
DES_ADDR_RANGE |
any
} {
label
<1-65535>
|
precedence
<0-7> |
tos
{<0-255> |
range
<0-255> <0-
255>}
|
pkt-size
{
lt
<0-65535>
| gt
<0-65535>
|
range
<0-65535> <0-
65535>}
|
fragments | log
|
inter-
face
{
in
|
out
}
[{
tengigabitether-
net IFPORT | gpon IFPORT
|
channelgroup
}
IFPORT
|
vlan
VLANID
}]
