Reference Guide

698
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\ACL.fm
DELL CONFIDENTIAL – PRELIMINARY 2013 - FOR PROOF ONLY
Example
console(config)# ip access-list extended server
console(config-ip-al)#
deny ip 1.1.1.0 0.0.0.255 1.1.2.0 0.0.0.0
ipv6 access-list
Use the ipv6 access-list global configuration mode command to define an
IPv6 access list and to place the device in IPv6 access list configuration mode.
Use the no form of this command to remove the access list.
Syntax
ipv6 access-list [ access-list-name ]
no ipv6 access-list [
access-list-name ]
Parameters
• access-list-name —Name of the IPv6 access list.
• access-list-name —0–32 characters (use "" for empty string)
Default
No IPv6 access list is defined.
Command Mode
Global Configuration mode
User Guidelines
IPv6 ACL is defined by a unique name. IPv4 ACLs, IPv6 ACLs, MAC ACLs
or policy maps cannot have the same name.
Every IPv6 ACL has implicit permit icmp any any nd-ns any, permit icmp
any any nd-na any, and deny ipv6 any any statements as its last match
conditions. (The former two match conditions allow for ICMPv6 neighbor
discovery.)
The IPv6 neighbor discovery process uses the IPv6 network layer service,
therefore, by default, IPv6 ACLs implicitly allow IPv6 neighbor discovery
packets to be sent and received on an interface. In IPv4, the Address
Resolution Protocol (ARP), which is equivalent to the IPv6 neighbor