filter acl ace ipv6

Use access control entry (ACE) IPv6 entries to filter on IPv6 parameters.

Syntax

filter acl ace ipv6 <1-2048> <1-2000> dst-ipv6 {eq | mask} WORD<0-255> [WORD<0-255>]
filter acl ace ipv6 <1-2048> <1-2000> nxt-hdr eq {fragment | hop-by-hop | icmpv6 | ipsecah | ipsecesp | noHdr | routing | tcp | udp | undefined}
filter acl ace ipv6 <1-2048> <1-2000> src-ipv6 {eq | mask} WORD<0-255> [WORD<0-255>]
filter acl ace ipv6 <1-2048> <1-2000> traffic-class eq <0-255>
filter acl ace ipv6 <1-2048> <1-2000> routed-only
no filter acl ace ipv6 <1-2048> <1-2000>
no filter acl ace ipv6 <1-2048> <1-2000> dst-ipv6
no filter acl ace ipv6 <1-2048> <1-2000> nxt-hdr
no filter acl ace ipv6 <1-2048> <1-2000> src-ipv6
no filter acl ace ipv6 <1-2048> <1-2000> traffic-class
no filter acl ace ipv6 <1-2048> <1-2000> routed-only

<1-2000>: Specifies the ACE ID.
<1-2048>: Specifies the ACL ID.
dst-ipv6 {eq | mask} WORD<0-255>: The <eq|mask> parameter specifies an operator for a field match condition.; The WORD<0-255> parameter specifies a list of destination IPv6 addresses separated by a comma, or a range of IPv6 addresses specified from low to high; for example, [AA:BB:CC:DD:EE:FF].
nxt-hdr eq <fragment | hop-by-hop | icmpv6 | ipsecah | ipsecesp | noHdr | routing | tcp | udp | undefined>: Specify next header of IP header.
src-ipv6 {eq | mask} WORD<0-255>: The <eq|mask> parameter specifies an operator for a field match condition: equal to.; The WORD<0-255> parameter specifies a list of source IPv6 addresses separated by a comma, or a range of IPv6 addresses specified from low to high; for example, [AA:BB:CC:DD:EE:FF].
traffic-class eq <0-255>: Specify traffic class attribute of IPv6 header.

routed-only: Specifies a field match condition for IPv6 routed packets only. The default is disabled.

None

Global Configuration