PLANET WGSW-52040 - Manual (Page 617)

38-157
Example:
Create an extended access control list named udpFlow, denying the igmp packets while allowing udp packets with
destination address 2001:1:2:3::1 and destination port 32.
Switch(config)#ipv6 access-list extended udpFlow
Switch(Config-IPv6-Ext-Nacl-udpFlow)#deny igmp any any-destination
Switch(Config-IPv6-Ext-Nacl-udpFlow)#permit udp any-source host-destination 2001:1:2:3::1 dPort 32
38.21 permit | deny(ipv6 standard)
Command:
[no] {deny | permit} {{<sIPv6Prefix/sPrefixlen>} | any-source | {host-source <sIPv6Addr>}}
Function:
Create a standard nomenclature IPv6 access control rule; the no form of this command deletes the nomenclature
standard IPv6 access control rule.
Parameter:
<sIPv6Prefix> is the prefix of the source IPv6 address, <sPrefixlen> is the length of the IPv6 address prefix, the
valid range is 1~128. <sIPv6Addr> is the source IPv6 address.
Command Mode:
Standard IPv6 nomenclature access list mode
Default:
No access list configured by default.
Example:
Permit packets with source address of 2001:1:2:3::1/64 while denying those with source address of 2001:1:2:3::1/48.
Switch(config)#ipv6 access-list standard ipv6Flow
Switch(Config-IPv6-Std-Nacl-ipv6Flow)# permit 2001:1:2:3::1/64
Switch(Config-IPv6-Std-Nacl-ipv6Flow)# deny 2001:1:2:3::1/48
38.22 permit | deny(mac extended)
Command:
[no]{deny|permit} {any-source-mac|{host-source-mac <host_smac> }|{ <smac> <smac-mask> }}
{any-destination-mac|{host-destination-mac <host_dmac> }|{ <dmac> <dmac-mask> }} [cos <cos-val>