Brocade BigIron RX Series Configuration Guide - Manual (Page 1373)

BigIron RX Series Configuration Guide 1295
53-1002484-04
Configuring an IPv6 ACL
48
ipv6-operator Allows you to filter the packets further by using one of the following options:
•
dscp – The policy applies to packets that match the traffic class value in
the traffic class field of the IPv6 packet header. This operator allows you
to filter traffic based on TOS or IP precedence. You can specify a value
from 0 – 63.
•
fragments – The policy applies to fragmented packets that contain a
non-zero fragment offset.
NOTE: This option is not applicable to filtering based on source or destination
port, TCP flags, and ICMP flags.
•
routing – The policy applies only to IPv6 source-routed packets.
NOTE: This option is not applicable to filtering based on source or destination
port, TCP flags, and ICMP flags.
•
sequence – The sequence parameter specifies where the conditional
statement is to be added in the access list. You can add a conditional
statement at particular place in an access list by specifying the entry
number using the sequence keyword. You can specify a value from 1 –
4294967295.
You can specify which flags inside the TCP header need to be matched.
Specify any of the following flags for
< tcp- flags > :
•
+ | – urg = Urgent
•
+ | – ack= Acknowledge
•
+ | – psh + Push
•
+ | – rst = Reset
•
+ | – syn = Synchronize
•
+ | – fin = Finish
match-all < tcp- flags >
match-any < tcp-flag >
Enter match-all < tcp- flags > if you want all the flags you specify to be matched
from a TCP session. Use match-any < tcp-flag > if any of the flags will be
matched. You can enter more than one TCP flag. Separate each flag with a
space, using a + or – to indicate if the matching condition requires the bit to
be set to 1 (+) or 0 (–).
802.1p-priority-matching
< number >
If you want to match only those packets that have the same 802.1p priorities
as specified in the ACL. Enter 0 – 7.
dscp-marking < number > Use the dscp-marking < number > parameter to specify a new QoS value to the
packet. If a packet matches the filters in the ACL statement, this parameter
assigns the DSCP value that you specify to the packet. Enter 0 – 63.
802.1p-priority-marking
< number >
Use the 802.1p-priority-marking < number > parameter to specify a new QoS
value to the packet. If a packet matches the filters in the ACL statement, this
parameter assigns the 802.1p priority that you specify to the packet. Enter 0 –
7.
internal-priority-marking
< number >
Use the internal-priority-marking < number > parameter to specify a new QoS
value to the packet. If a packet matches the filters in the ACL statement, this
parameter assigns the internal priority that you specify to the packet. Enter 0
– 7.
TABLE 224 Syntax descriptions (Continued)
Arguments... Description...