ECS4100 Series CLI Reference Guide-R07

Chapter 10 | Access Control Lists
IPv6 ACLs
– 385 –
◆ An ACL can contain up to 64 rules.
Example
Console(config)#access-list ipv6 standard david
Console(config-std-ipv6-acl)#
Related Commands
permit, deny (Standard IPv6 ACL) (385)
permit, deny (Extended IPv6 ACL) (386)
ipv6 access-group (388)
show ipv6 access-list (389)
permit, deny
(Standard IPv6 ACL)
This command adds a rule to a Standard IPv6 ACL. The rule sets a filter condition for
packets emanating from the specified source. Use the no form to remove a rule.
Syntax
{permit | deny} {any | host source-ipv6-address |
source-ipv6-address[/prefix-length]}
[time-range time-range-name]
no {permit | deny} {any | host source-ipv6-address |
source-ipv6-address[/prefix-length]}
any – Any source IP address.
host – Keyword followed by a specific IP address.
source-ipv6-address - An IPv6 source address or network class. The address
must be formatted according to RFC 2373 “IPv6 Addressing Architecture,”
using 8 colon-separated 16-bit hexadecimal values. One double colon may
be used in the address to indicate the appropriate number of zeros
required to fill the undefined fields.
prefix-length - A decimal value indicating how many contiguous bits (from
the left) of the address comprise the prefix; i.e., the network portion of the
address. (Range: 0-128)
time-range-name - Name of the time range. (Range: 1-32 characters)
Default Setting
None
Command Mode
Standard IPv6 ACL
Command Usage
New rules are appended to the end of the list.