OS10 Enterprise Edition User Guide Release 10.4.0E(R3)

PDF

deny (IPv6)

Configures a filter to drop packets with a specific IPv6 address.

Syntax
deny [ protocol-number | icmp | ipv6 | tcp | udp] [A::B | A::B/x | any | host ipv6-address] [A::B | A::B/x | any | host ipv6-address] [capture | count [byte] | dscp value | fragment]
Parameters
  • protocol-number — (Optional) Enter the protocol number identified in the IP header, from 0 to 255.
  • icmp — (Optional) Enter the ICMP address to deny.
  • ipv6 — (Optional) Enter the IPv6 address to deny.
  • tcp — (Optional) Enter the TCP address to deny.
  • udp — (Optional) Enter the UDP address to deny.
  • A::B — Enter the IPv6 address in dotted decimal format.
  • A::B/x — Enter the number of bits to match to the IPv6 address.
  • any — (Optional) Enter so that all routes are subject to the filter:
    • capture — (Optional) Capture packets the filter processes.
    • count — (Optional) Count packets the filter processes.
    • byte — (Optional) Count bytes the filter processes.
    • dscp value — (Optional) Deny a packet based on the DSCP values, from 0 to 63.
    • fragment — (Optional) Use ACLs to control packet fragments.
  • host ipv6-address — (Optional) Enter the keyword and the IPv6 address to use a host address only.
Default
Not configured
Command Mode
IPV6-ACL
Usage Information
OS10 cannot count both packets and bytes; when you use the count byte options, only bytes increment. The no version of this command removes the filter.
Example
OS10(config)# ipv6 access-list ipv6test
                                       OS10(conf-ipv6-acl)# deny ipv6 any any capture session 1
                                    
Supported Releases
10.2.0E or later

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\