14 ipv6 access standard, 15 ipv6 access extended, 16 {ip|ipv6|mac|mac-ip} access-group – PLANET XGS3-24040 User Manual

Page 739: Access standard, Access extended, Access, Group

Advertising
background image

Commands for Security Function Chapter 2 Commands for 802.1x

41-11

2003:1:2::1/48 pass through.

Switch (config)#ipv6 access-list 520 deny 2003:1:2:::1/48

Switch (config)#ipv6 access-list 520 permit 2003:1:2:3::1/64

Switch (config)#ipv6 access-list 520 deny 2003:1:2:::1/48

41.14 ipv6 access standard

Command: ipv6 access-list standard <name>

no ipv6 access-list standard <name>

Function: Create a name-based standard IPv6 access list; the “no ipv6 access-list

standard<name>”command deletes the name-based standard IPv6 access list (including all entries).

Parameter: <name> is the name for access list, the character string length is from 1-32.

Command Mode: Global Mode.

Default: No access list is configured by default.

Usage Guide: When this command is run for the first time, only an empty access list with no entry will be

created.

Example: Create a standard IPv6 access list named “ip6Flow”.

Switch(config)#ipv6 access-list standard ip6Flow

Switch(config)#ipv6 access-list standard ip6Flow

41.15 ipv6 access extended

Command: ipv6 access-list extended <name>

no ipv6 access-list extended <name>

Function: Create a name-based extended IPv6 access list; the “no ipv6 access-list extended<name>

command delete the name-based extended IPv6 access list.

Parameter: <name> is the name for access list, the character string length is from 1 to 32.

Command Mode: Global Mode.

Default: No IP address is configured by default.

Usage Guide: When this command is run for the first time, only an empty access list with no entry will be

created.

Example: Create an extensive IPv6 access list named “tcpFlow”.

Switch (config)#ipv6 access-list extended tcpFlow

41.16 {ip|ipv6|mac|mac-ip} access-group

Command: {ip|ipv6|mac|mac-ip} access-group <name> {in} [traffic-statistic]

no {ip|mac} access-group <name> {in}

Function: Apply an access-list on some direction of port, and determine if ACL rule is added statistic

counter or not by options; the no command deletes access-list binding on the port.

Parameter: <name> is the name for access list, the character string length is from 1-32.

Command Mode: Physical Port Mode

Advertising