deny ipv6-dest

Drops packets that match the configured destination IPv6 address and mask.

Syntax

deny [ ipv6-dest addr mask ]

no deny [ ipv6-dest addr mask ]

Parameters

ipv6-dest addr mask: Specifies the source IPv6 address and mask configured in hexadecimal between 0 and FFFF. Example: 202:304:606:708:90a:b0c:d0e:f11.; The upper 4 bytes and lower 8 bytes of the mask must be zero because only 32 bits out of 128 bits of IPv6 are supported. Example: 0000:0000:FFFF:FFFF:0000:0000:0000:0000.

Modes

Transport tunnel config mode

Usage Guidelines

This command is available only to users with the admin role.

A valid IP address and mask must be provided.

The configured destination IP address must be removed before you configure a new destination IP address.

If the same command is run more than once, the second and subsequent instances are ignored and no error is reported.

Examples

The following example configures the IPv6 address and mask to match and deny further packet processing for transport tunnel tt1 and verifies the configuration with the show command.

device(config)# transport-tunnel tt1 

device(config-transport-tunnel)# 
deny ipv6-dest 1145:456:234:2345:1123:1145:456:234 0000:0000:FFFF:FFFF:0000:0000:0000:000 

device# show transport-tunnel tt1 
                  Name : tt1 
      Source-Ipv6-Addr : 2233:304:606:708:90a:b0c:d0e:f11 
      Source-Ipv6-Mask : 0000:0000:FFFF:FFFF:0000:0000:0000:000 
Destination-Ipv6-Addr : 1145:456:234:2345:1123:1145:456:234 
Destination-Ipv6-Mask : 0000:0000:FFFF:FFFF:0000:0000:0000:000 
           Tunnel-Type : GRE 
         Ingress-Group : none 

device# show running-config transport-tunnel 
transport-tunnel tt1 
  tunnel-type gre ipv6-src 
2233:304:606:708:90a:b0c:d0e:f11 0000:0000:FFFF:FFFF:0000:0000:0000:000 
  deny ipv6-dest 
1145:456:234:2345:1123:1145:456:234 0000:0000:FFFF:FFFF:0000:0000:0000:000