CLI Reference Guide

502 IPv6 Access List Commands
• assign-queue queue-id —Specifies the assign-queue, which is the queue
identifier to which packets matching this rule are assigned.
• {mirror | redirect}
unit/slot/ port —Specifies the mirror or redirect
interface which is the unit/slot/port to which packets matching this rule
are copied or forwarded, respectively.
•rate-limit
rate burst-size —Specifies the allowed rate of traffic as per the
configured rate in kbps, and burst-size in kbytes.
– Rate – the committed rate in kilobits per second
– Burst-size – the committed burst size in Kilobytes.
Default Configuration
This command has no default configuration.
Command Mode
IPv6-Access-List Configuration mode
User Guidelines
Users are permitted to add rules, but if a packet does not match any user-
specified rules, the packet is dropped by the implicit “deny all” rule.
In order to provide the greatest amount of flexibility in configuring ACLs, the
permit/deny syntax allows combinations of matching criteria that may not
make sense when applied in practice.
The rate-limit command is not supported in egress (out) access groups.
Any – is equivalent to ::/0 for IPv6 access lists.
Host - indicates /128 prefix length for IPv6.
Port ranges are not supported for egress (out) IPv6 traffic-filters. This means
that only the eq operator is supported for egress (out) ACLs.
The protocol type must be TCP or UDP to specify a port range.
The IPv6 “fragment” and “routing” keywords are not supported on egress
(out) access groups.
2CSNXXX_SWUM200.book Page 502 Tuesday, December 10, 2013 1:22 PM