User Manual

SWP1(config)#interface ge1
SWP1(config-if)#ip access-group 100 in
13.1.7 Generate IPv6 access list
[Syntax]
access-list ipv6-acl-id action src-info
no access-list ipv6-acl-id [
action src-info]
[Parameter]
ipv6-acl-id : <3000-3699>
ID of IPv6 access list
action : Specifies the action for the access condition
Setting value Description
deny "Deny" the condition
permit "Permit" the condition
src-info : Specifies the transmission-source IPv6 address that is the condition
Setting value Description
X:X::X:X/M
Specifies an IPv6 address (X:X::X:X) with
subnet mask length (Mbit)
any Applies to all IPv6 addresses
[Initial value]
none
[Input mode]
global configuration mode
[Description]
Generates an IPv6 access list.
Multiple conditions (maximum 39) can be specified for the generated access list.
To apply the generated access list, use the "ip access-group" command of interface mode.
The "no access-list ipv6-acl-id action src-info" syntax deletes the extended IPv6 address list that matches all conditions.
The "no access-list ipv6-acl-id" syntax deletes the IPv6 access list that matches ipv6-acl-id.
[Note]
An access list that is applied to an interface cannot be deleted using the "no" syntax. Before you can delete the access list, you
must rescind the application of that list.
[Example]
Create standard IPv6 access list #3002 which will permit frames from 3ffe:506::/32.
SWP1(config)#access-list 3002 permit 3ffe:506::/32
Delete standard IPv6 access list #3002.
SWP1(config)#no access-list 3002
13.1.8 Add comment to IPv6 access list
[Syntax]
access-list ipv6-acl-id remark line
no access-list ipv6-acl-id remark
172 | Command Reference | Traffic control