XGS-5240-Series User Manual

Configuration Guide of XGS-5240-Series
45-17
（
11
）
Configuring a numbered extensive IPv6 access-list
Command
Explanation
Global Mode
ipv6 access-list <num-ext> {deny | permit} icmp
{{<sIPv6Prefix/sPrefixlen>} | any-source | {host-so
urce <sIPv6Addr>}} {<dIPv6Prefix/dPrefixlen> | an
y-destination | {host-destination <dIPv6Addr>}} [<i
cmp-type> [<icmp-code>]] [dscp <dscp>] [flow-lab
el <fl>][time-range<time-range-name>]
ipv6 access-list <num-ext> {deny | permit} tcp {{<
sIPv6Prefix/sPrefixlen>} | any-source | {host-sourc
e <sIPv6Addr>}} [s-port {<sPort> | range <sPortMi
n> <sPortMax>}] {{< dIPv6Prefix/dPrefixlen>} | any
-destination | {host-destination <dIPv6Addr>}} [dP
ort {<dPort> | range <dPortMin> <dPortMax>}] [sy
n | ack | urg | rst | fin | psh] [dscp <dscp>] [flo
w-label <flowlabel>][time-range<time-range-name>]
ipv6 access-list <num-ext> {deny | permit} udp
{{<sIPv6Prefix/sPrefixlen>} | any-source | {host-so
urce <sIPv6Addr>}} [s-port {<sPort> | range <sPo
rtMin> <sPortMax>}] {{<dIPv6Prefix/dPrefixlen>} |
any-destination | {host-destination <dIPv6Addr>}}
[dPort {<dPort> | range <dPortMin> <dPortMax>}]
[dscp <dscp>] [flow-label <flowlabel>][time-range
<time-range-name>]
ipv6 access-list <num-ext> {deny | permit} <next-
header> {<sIPv6Prefix/sPrefixlen> | any-source |
{host-source <sIPv6Addr>}} {<dIPv6Prefix/dPrefixle
n> | any-destination | {host-destination <dIPv6Add
r>}} [dscp <dscp>] [flow-label <fl>][time-range<tim
e-range-name>]
no ipv6 access-list <num>
Creates a numbered extend
ed IPv6 access-list, if the a
ccess-list already exists, the
n a rule will add to the curr
ent access-list; the no com
mand deletes a numbered s
tandard IPv6 access-list.
（
12
）
Configuring a standard IPv6 access-list based on nomenclature
a. Create a standard IPv6 access-list based on nomenclature
Command
Explanation
Global Mode