Adding a comment to an ipv6 acl entry, Adding a comment to an ipv6 acl entry 8 – Brocade BigIron RX Series Configuration Guide User Manual

Page 1376

Advertising
background image

1298

BigIron RX Series Configuration Guide

53-1002484-04

Adding a comment to an IPv6 ACL entry

48

Adding a comment to an IPv6 ACL entry

You can optionally add a comment to describe entries in an IPv6 ACL. The comment appears in the
output of show commands that display ACL information.

You can add a comment by entering the remark command immediately preceding an ACL entry, or
specify the ACL entry to which the comment applies.

For example, to enter comments for preceding an ACL entry, enter commands such as the
following.

BigIron RX(config)#ipv6 access-list rtr

BigIron RX(config-ipv6-access-list rtr)# remark This entry permits ipv6 packets

from 3002::2 to any destination

BigIron RX(config-ipv6-access-list rtr)# permit ipv6 host 3000::2 any

BigIron RX(config-ipv6-access-list rtr)# remark This entry denies udp packets from

any source to any destination

BigIron RX(config-ipv6-access-list rtr)# deny udp any any

BigIron RX(config-ipv6-access-list rtr)# remark This entry denies IPv6 packets

from any source to any destination

BigIron RX(config-ipv6-access-list rtr)# deny ipv6 any any

BigIron RX(config-ipv6-access-list rtr)# write memory

Syntax: remark <comment-text>

The <comment-text> can be up to 256 characters in length.

To apply a comment to a specific ACL entry, specify the ACL’s entry number with the remark-entry
sequence command. Use the show ipv6 access-list command to list ACL entry number. Enter
commands such as the following :

Syntax: remark-entry sequence <sequence number> <comment-text>

The <sequence number> is the line number assigned to the ACL entry. For a list of ACL entry
numbers, use the show ipv6 access-list command.

The <comment-text> can be up to 256 characters in length. The comment must be entered
separately from the actual ACL entry; that is, you cannot enter the ACL entry and the ACL comment
with the same command.

You can use the show running-config or show ipv6 access-list commands to display IPv6 ACLs and
comments.

The following shows the comment text for the ACL named "rtr" in a show running-config display.

BigIron RX(config)# ipv6 access-list netw

BigIron RX(config-ipv6-access-list netw) remark-entry sequence 10 This entry

permits ipv6 packets from 3000::2 to any destination

BigIron RX(config-ipv6-access-list netw)# remark-entry sequence 20 This entry

denies UDP packets from any source to any destination

BigIron RX(config-ipv6-access-list netw)# remark-entry sequence 30 This entry

denies IPv6 packets from any source to any destination

Advertising