User guide

Brocade 6910 Ethernet Access Switch Configuration Guide 867
53-1002581-01
Access Control Lists
41
FIGURE 204 Configuring a Standard IPv6 ACL
Configuring an Extended IPv6 ACL
Use the Security > ACL (Configure ACL - Add Rule - IPv6 Extended) page to configure an Extended
IPv6 ACL.
CLI References
• “permit, deny (Extended IPv6 ACL)” on page 248
• “show ipv6 access-list” on page 249
• “Time Range” on page 102
Parameters
These parameters are displayed in the web interface:
• Type – Selects the type of ACLs to show in the Name list.
• Name – Shows the names of ACLs matching the selected type.
• Action – An ACL can contain any combination of permit or deny rules.
• Source/Destination Address Type – Specifies the source or destination IP address type. Use
“Any” to include all possible addresses, or “IPv6-Prefix” to specify a range of addresses.
(Options: Any, IPv6-Prefix; Default: Any)
• Source/Destination IPv6 Address – An IPv6 address or network class. The address must be
formatted according to RFC 2373 “IPv6 Addressing Architecture,” using 8 colon-separated
16-bit hexadecimal values. One double colon may be used in the address to indicate the
appropriate number of zeros required to fill the undefined fields.
• Source/Destination Prefix-Length – A decimal value indicating how many contiguous bits (from
the left) of the address comprise the prefix; i.e., the network portion of the address.
(Range: 0-128 bits for the source address; 0-8 bits for the destination address)
• DSCP – DSCP traffic class. (Range: 0-63)
• Next Header – Identifies the type of header immediately following the IPv6 header. (Range:
0-255)