MES1000, MES2000 Ethernet Switches 201
{any|destination_ip destination_ip_wildcard}
{any|destination_port}
[dscp dscp | precedence precedence]
[time-range range_name]
[disable-port|log-input] [index index]
[offset-list offset_list_name]
disable-port is used, the physical interface that receives such packet, will
be disabled.
offset-list name { offset_base offset mask value}
…
Creates a user templates list with the name specified in the name field.
The name should contain from 1 to 32 characters.
One command may contain up to 4 templates having the following
parameters:
offset_base—basic offset. Possible values:
L3—beginning of the IPv4 header.
L4—end of the IPv4 header.
offset—byte offset within a packet. Basic offset is considered as a
starting point.
mask—mask. Packet analysis is performed only for the bytes digits which
have "1" specified as defined in the mask.
value—the set value.
Removes a previously created list.
5.31.2 IPv6 ACL Configuration
The section provides values and description of main parameters which are used in IPv6 ACL
configuration commands.
In order to create an IPv6 ACL and enter its configuration mode, use the following command: ipv6
access-list access-list. For example, to create the MESipv6 ACL, the following commands should
be executed:
console#
console# configure
console(config)# ipv6 access-list MESipv6
console(config-ipv6-al)#
Table 5.244—Main parameters of commands
Creates a permitting filtration rule in ACL.
Creates a denying filtration rule in ACL.
The field is used to specify a protocol (or all protocols)
filtration will be based on. The following protocol options are
available: icmp, tcp, udp or the protocol number—icmp (58),
tcp (6), udp (17).
The ipv6 value is used for all protocols to establish
correspondence.
Source address and its
length
Defines IPv6 address and prefix length (0–128) (the number of
the most significant bits in the address) of the packet source.
destination_prefix/
length
Destination address and its
length
Defines IPv6 address and prefix length (0–128) (the number of
the most significant bits in the address) of the packet
destination.
The DSCP field in L3 header
Defines the value of the diffserv DSCP field. Possible message
codes of the dscp field: (0–63).
Defines the priority of IP traffic: (0–7).
Name of the time-range
configuration profile
Defines configuration of time periods.
It is used for filtration of ICMP packets. Possible message
codes and values of the icmp_type field: destination-
unreachable (1), packet-too-big (2), time-exceeded (3),
parameter-problem (4), echo-request (128), echo-reply (129),
mld-query (130), mld-report (131), mldv2-report (143), mld-
done (132), router-solicitation (133), router-advertisement
To Next Page
Loading...
Need help?
General
