filter acl ace ipv6

Syntax

• filter acl ace ipv6 <acl-id> <ace-id> dst-ipv6 {eq | mask} WORD<0-255> [WORD<0-255>]

• filter acl ace ipv6 <acl-id> <ace-id> nxt-hdr eq {fragment | hop-by-hop | icmpv6 | ipsecah | ipsecesp | noHdr | routing | tcp | udp | undefined}

• filter acl ace ipv6 <acl-id> <ace-id> src-ipv6 {eq | mask} WORD<0-255> [WORD<0-255>]

• filter acl ace ipv6 <acl-id> <ace-id> traffic-class eq <0-255>

• no filter acl ace ipv6 <acl-id> <ace-id>

• no filter acl ace ipv6 <acl-id> <ace-id> dst-ipv6

• no filter acl ace ipv6 <acl-id> <ace-id> nxt-hdr

• no filter acl ace ipv6 <acl-id> <ace-id> src-ipv6

• no filter acl ace ipv6 <acl-id> <ace-id> traffic-class

Command Parameters

<ace-id>

Specifies the ACE ID. Different hardware platforms support different ACE ID ranges. Use the CLI Help to see the available range for the switch.

<acl-id>

Specifies the ACL ID. Use the CLI Help to see the available range for the switch.

dst-ipv6 {eq | mask} WORD<0-255>

The <eq|mask> parameter specifies an operator for a field match condition.

The WORD<0-255> parameter specifies a list of destination IPv6 addresses separated by a comma, or a range of IPv6 addresses specified from low to high; for example, [AA:BB:CC:DD:EE:FF].

nxt-hdr eq <fragment | hop-by-hop | icmpv6 | ipsecah | ipsecesp | noHdr | routing | tcp | udp | undefined>

Specify next header of IP header.

src-ipv6 {eq | mask} WORD<0-255>

The <eq|mask> parameter specifies an operator for a field match condition: equal to.

The WORD<0-255> parameter specifies a list of source IPv6 addresses separated by a comma, or a range of IPv6 addresses specified from low to high; for example, [AA:BB:CC:DD:EE:FF].

traffic-class eq <0-255>

Specify traffic class attribute of IPv6 header.

Default

None

Command Mode

Global Configuration