Qtech QSW-8200-28T-AC [24/114] Permit deny ipv6 standard

User Manual

Chapter 1. Commands for ACL 24

www.qtech.ru

boundary of destination port. <next-header>, the IPv6 next-header. <time-range-

name>, time range name.

 Command Mode: IPv6 nomenclature extended access control list mode

 Default: No access control list configured.

 Example: Create an extended access control list named udpFlow, denying the igmp

packets while allowing udp packets with destination address 2001:1:2:3::1 and

destination port 32.

 Switch(config)#ipv6 access-list extended udpFlow

 Switch(Config-IPv6-Ext-Nacl-udpFlow)#deny igmp any any-destination

 Switch(Config-IPv6-Ext-Nacl-udpFlow)#permit udp any-source host-destination

2001:1:2:3::1 dPort 32

1.24 permit | deny(ipv6 standard)

 Command: [no] {deny | permit} {{<sIPv6Prefix/sPrefixlen>} | any-source | {host-

source <sIPv6Addr>}}

 Function: Create a standard nomenclature IPv6 access control rule; the no form of this

command deletes the nomenclature standard IPv6 access control rule.

 Parameter: <sIPv6Prefix> is the prefix of the source IPv6 address, <sPrefixlen> is the

length of the IPv6 address prefix, the valid range is 1~128. <sIPv6Addr> is the source

IPv6 address.

 Command Mode: Standard IPv6 nomenclature access list mode

 Default: No access list configured by default.

 Usage Guide:

 Example: Permit packets with source address of 2001:1:2:3::1/64 while denying those

with source address of 2001:1:2:3::1/48.

 Switch(config)#ipv6 access-list standard ipv6Flow

 Switch(Config-IPv6-Std-Nacl-ipv6Flow)# permit 2001:1:2:3::1/64

 Switch(Config-IPv6-Std-Nacl-ipv6Flow)# deny 2001:1:2:3::1/48

1.25 permit | deny(mac extended)

 Command:

 [no]{deny|permit} {any-source-mac|{host-source-mac <host_smac> }|{ <smac>

<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{

<dmac> <dmac-mask> }} [cos <cos-val> [ <cos-bitmask> ][vlanid <vid-value> [ <vid-

mask> ][ethertype <protocol> [ <protocol-mask> ]]]]

 [no]{deny|permit} {any-source-mac|{host-source-mac <host_smac> }|{ <smac>

<smac-mask> }} {any-destination-mac|{host-destination-mac <host_dmac> }|{

<dmac> <dmac-mask> }} [ethertype <protocol> [ <protocol-mask> ]]