13 ipv6 access-list, 14 ipv6 access standard, Access – PLANET WGSW-50040 User Manual

Page 325: List, Access standard

Advertising
background image

Commands for Security Function Chapter 6 Commands for TACACS+

21.13 ipv6 access-list

Command:

ipv6 access-list <num-std> {deny | permit} {<sIPv6Prefix/sPrefixlen> | any-source |

{host-source <sIPv6Addr>}}

no ipv6 access-list <num-std>

Functions:

Creates a numbered standard IP access-list, if the access-list already exists, then a rule will add to

the current access-list; the “no access-list {<num-std>|<num-ext>} “command deletes a

numbered standard IP access-list.

Parameters:

<num-std> is the list number ,list range is between 500~599;

<sIPv6Prefix> is the prefix of the ipv6 source address;

<sPrefixlen > is the length of prefix of the ipv6 source address, range is between 1~128;

<sIPv6Addr> is the ipv6 source address.

Command Mode:

Global Mode.

Default:

No access-list configured.

Usage Guide:

Creates a numbered 520 standard IP access-list first time, the following configuration will add to the

current access-list.

Examples:

Creates a numbered 520 standard IP access-list, allow the source packet from 2003:1:2:3::1/64

pass through the net, and deny all the other packet from the source address 2003:1:2::1/48 pass

through.

Switch (config)#ipv6 access-list 520 permit 2003:1:2:3::1/64

Switch (config)#ipv6 access-list 520 deny 2003:1:2:::1/48

21.14 ipv6 access standard

Command:

ipv6 access-list standard <name>

no ipv6 access-list standard <name>

Function:

Create a name-based standard IPv6 access list; the “no ipv6 access-list

standard<name>”command deletes the name-based standard IPv6 access list (including all

Advertising