HP 6200YL User Manual

Page 225

Advertising
background image

IPv6 Access Control Lists (ACLs)

Configuration Commands

Note: For more on how prefix lengths are used in IPv6

ACLs, refer to “How an ACE Uses a Prefix To Screen Packets
for SA and DA Matches” on page 8-32.

< any | host < DA > | DA/prefix-length >

This is the second instance of addressing in an IPv6 ACE. It
follows the first (SA) instance, described earlier in this
section, and defines the destination IPv6 address (DA) that a
packet must carry to have a match with the ACE.
anyAllows IPv6 packets to any IPv6 DA.
host < DA > — Specifies only packets having DA as the

destination address. Use this criterion when you want to
match only the IPv6 packets for a single DA.

DA/prefix-length — Specifies packets intended for one or

more contiguous subnets or contiguous addresses within a
single subnet. The prefix length is in CIDR format and
defines the number of leftmost bits to use in determining a
match. (Refer to “Using CIDR Notation To Enter the IPv6
ACL Prefix Length” on page 8-41
.) In a given ACE, the DA
prefix length defines how many leftmost bits in a packet’s
DA must exactly match the DA configured in the ACE.

Example: Refer to “Examples of Prefix-Length
Applications” in the presiding syntax description.

[ dscp < codepoint | precedence >]

This option follows the DA to include a DSCP codepoint or
precedence as a matching criteria.

codepoint: Supports these codepoint selection options:

8-49

Advertising
This manual is related to the following products: