2-292
Catalyst 3560 Switch Command Reference
78-16405-05
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands
permit (IPv6 access-list configuration)
permit (IPv6 access-list configuration)
Use the permit IPv6 access list configuration command to set permit conditions for an IPv6 access list.
Use the no form of this command to remove the permit conditions.
permit {protocol} {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}
[operator [port-number]] [dscp value] [fragments] [log] [log-input] [sequence value]
[time-range name]
no permit {protocol} {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any
| host destination-ipv6-address}
[operator [port-number]] [dscp value] [fragments] [log] [log-input] [sequence value]
[time-range name]
Note Although visible in the command-line help strings, the flow-label, reflect, and routing keywords are not
supported.
Internet Control Message Protocol
permit icmp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}
[operator [port-number]] [icmp-type [icmp-code] | icmp-message] [dscp value] [log]
[log-input] [sequence value] [time-range name]
Transmission Control Protocol
permit tcp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}
[operator [port-number]] [ack] [dscp value] [established] [fin] [log] [log-input] [neq {port |
protocol}] [psh] [range {port | protocol}] [rst] [sequence value] [syn] [time-range name]
[urg]
User Datagram Protocol
permit udp {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [operator
[port-number]] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address}
[operator [port-number]] [dscp value] [log] [log-input] [neq {port | protocol}] [range {port |
protocol}] [sequence value] [time-range name]
Note Although visible in the command-line help strings, the flow-label, reflect, and routing keywords are not
supported.
This command is available only if your switch is running the advanced IP services image and has a
switch database management (SDM) dual IPv4 and IPv6 template configured.