User Manual

Table Of Contents
NETGEAR M4500 Series Switches CLI Command Reference Manual 562
Format {deny | permit} {{every [rule-id] [assign-queue <queue-id>] [log] [{{mirror | redirect} <slot/port> | port-
channel <port-channel-group-id>}] [rate-limit <1-4294967295> <1-128>] [sequence <1-2147483647>]
[time-range <name>]} | {{<0-255> | icmpv6 | ipv6 | tcp | udp} {<source-ipv6-prefix/prefix-length> | any
| host <ipv6 srcip>} [eq {<0-65535> | <portkey>}] {<destination-ipv6-prefix/prefix-length> | any | host
<ipv6 dstip>} [eq {<0-65535> | <portkey>}] [flag [+fin | -fin] [+syn | -syn] [+rst | -rst] [+psh | -psh] [+ack |
-ack] [+urg | -urg] [established]] [dscp <value>] [flow-label <vlaue>] [icmp-type <icmp-type> [icmp-code
<icmp-code>] | icmp-message <icmp-message>] [fragments] [routing] [rule-id] [assign-queue <queue-
id>] [log] [{{mirror | redirect} <slot/port> | port-channel <port-channel-group-id>}] [rate-limit <1-
4294967295> <1-128>] [sequence <1-2147483647>] [time-range <name>] }}
Parameter
Description
deny or permit
Specifies whether the IPv6 ACL rule permits or denies the matching traffic.
every
Specifies to match every packet.
[rule-id]
Specifies a rule ID, the value range from 1 to 1023.
[assign-queue <queue-id>]
Specifies the assign-queue, which is the queue identifier to which packets
matching this rule are assigned, the value range from 0 to 7.
[log]
Specifies that this rule is to be logged.
{mirror | redirect}
{<slot/port> | port-channel
<port-channel-group-id>}
Specifies the mirror or redirect interface which is the unit/slot/port to which
packets matching this rule are copied or forwarded, respectively.
rate-limit <rate> <burst-size>
Specifies the allowed rate of traffic as per the configured rate in kbps range
from 1 to 4294967295, and burst-size in kbytes range from 1 to 128.
Sequence <sequence-
number>
Specifies a sequence number for the ACL rule. Every rule receives a sequence
number. The sequence number is specified by the user or is generated by the
device, the value range from 1 to 2147483647.
time-range <name>
Specifies a time limitation on the ACL rule as defined by the parameter time-
range-name.
<0-255>
Specifies the protocol to match for the IPv6 ACL rule, the value range from 0 to
255.
<source-ipv6-prefix/prefix-
length>
Specifies a source IPv6 source address and prefix length to match for the IPv6
ACL rule.
<destination-ipv6-
prefix/prefix-length>
Specifies a source IPv6 destination address and prefix length to match for the
IPv6 ACL rule.
Any
Specifying any implies specifying “::/0 “
host <ipv6 srcip>
Specifying host source-ipv6-address implies matching the specified IPv6
address.
host <ipv6 dstip>
Specifying host destination-ipv6-address implies matching the specified IPv6
address.