Cisco AP775A - Nexus Converged Network Switch 5010 Command Reference Manual page 415
Cisco nexus 5000 series command reference, release 4.1(3)n1(1) (ol-16599-01, august 2009)
Hide thumbs
Also See for AP775A - Nexus Converged Network Switch 5010:
- Configuration manual (1486 pages) ,
- Reference (886 pages) ,
- Release note (26 pages)
Table of Contents
Advertisement
Chapter 6
Security Commands
S e n d c o m m e n t s t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
established
flags
Command Default
None
Command Modes
IPv6 ACL configuration
Command History
Release
4.0(1a)N1(1)
Usage Guidelines
A newly created IPv6 ACL contains no rules.
When the device applies an IPv6 ACL to a packet, it evaluates the packet with every rule in the ACL.
The device enforces the first rule whose conditions are satisfied by the packet. When the conditions of
more than one rule are satisfied, the device enforces the rule with the lowest sequence number.
This command does not require a license.
Source and Destination
You can specify the source and destination arguments in one of several ways. In each rule, the method
you use to specify one of these arguments does not affect how you specify the other. When you configure
a rule, use the following methods to specify the source and destination arguments:
•
•
OL-16599-01
(TCP only; Optional) Specifies that the rule matches only packets that
belong to an established TCP connection. The device considers TCP packets
with the ACK or RST bits set to belong to an established connection.
(TCP only; Optional) Rule matches only packets that have specific TCP
control bit flags set. The value of the flags argument must be one or more of
the following keywords:
•
•
•
•
•
•
Modification
This command was introduced.
IPv6 address group object—You can use an IPv6 address group object to specify a source or
destination argument. Use the object-group ipv6 address command to create and change IPv6
address group objects. The syntax is as follows:
addrgroup address-group-name
The following example shows how to use an IPv6 address object group named lab-svrs-1301 to
specify the destination argument:
switch(config-acl)# permit ipv6 any addrgroup lab-svrs-1301
Address and variable-length subnet mask—You can use an IPv6 address followed by a
variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The
syntax is as follows:
ack
fin
psh
rst
syn
urg
Cisco Nexus 5000 Series Command Reference
permit (IPv6)
6-67
Advertisement
Table of Contents
