User Manual
Delete the transmission-source 192.168.1.0/24 from extended IPv4 access list #100
SWP1(config)#no ip-access-list 100 permit any 192.168.1.0 0.0.0.255 host 10.1.1.1
Delete the transmission-source 192.168.1.0/24 from extended IPv4 access list "TEST"
SWP1(config)#no ip-access-list extended TEST permit any 192.168.1.0 0.0.0.255 host
10.1.1.1
13.2.27 Generate IPv6 access list
[Syntax]
ip-access-list list-id action src-info
ip-access-list ipv6 name action src-info
no ip-access-list list-id action src-info
no ip-access-list ipv6 name action src-info
[Parameter]
list-id : <3000 - 3699>
IPv6 access list ID
name : Name of access list (Maximum 32 characters; uppercase and lowercase are distinguished. You cannot
specify a text string consisting only of numerals.)
action : Action for the access condition
Setting value Description
deny
Specifies "deny" as the action for the access
condition
permit
Specifies "permit" as the action for the access
condition
src-info : Transmission-source IPv6 address that is the condition
Setting value Description
X:X::X:X/M
Specifies an IPv6 address (X:X::X:X) with
subnet mask length (Mbit)
any
Don't specify the transmission-source IPv6
address (accept all IPv6 address)
[Input mode]
global configuration mode
[Description]
Generates an IPv6 access list.
When generating a list, you can either specify a defined ID or assign a desired name.
If you want to apply this to traffic classification conditions, execute the match access-group command in class map mode.
For a single ID, you can repeat this to make up to 30 registrations.
[Note]
In order to execute this command, QoS must be enabled.
An error occurs if the maximum number of registrations is exceeded, or if you specify content that is already registered.
[Example]
Create an IPv6 access list #3002 which permits packets from 3ffe:506::/32 through 3ffe:507::/32
SWP1(config)#ip-access-list 3002 permit 3ffe:506::/32
SWP1(config)#ip-access-list 3002 permit 3ffe:507::/32
Create an IPv6 access list "TEST" which permits packets from 3ffe:506::/32 through 3ffe:507::/32
SWP1(config)#ip-access-list ipv6 TEST permit 3ffe:506::/32
SWP1(config)#ip-access-list ipv6 TEST 3ffe:507::/32
Delete 3ffe:506::/32 from IPv6 access list #3002
Command Reference | Traffic control | 197