Netgear M4300-28G CLI Manual Software Version 12.x - Page 983
deny all IPv6, time-range, assign-queue, mirror, redirect, permit, rate-limit
View all Netgear M4300-28G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 983 highlights
M4300 Intelligent Edge Series Fully Managed Stackable Switches Format Mode [sequence-number] {deny | permit} {every | {{icmpv6 | ipv6 | tcp | udp | 0-255} {source-ipv6-prefix/prefix-length | any | host source-ipv6-address} [eq {portkey | 0-65535}] {destination-ipv6-prefix/prefix-length | any | host destination-ipv6-address} [eq {portkey | 0-65535}] [flag [+fin | -fin] [+syn | -syn] [+rst | -rst] [+psh | -psh] [+ack | -ack] [+urg | -urg] [established]] [flow-label value] [icmp-type icmp-type [icmp-code icmp-code] | icmp-message icmp-message] [routing] [fragments] [sequence sequence-number] [dscp dscp]}} [log] [assign-queue queue-id] [{mirror | redirect} unit/slot/port] [rate-limit rate burst-size] IPv6-Access-List Config Note: An implicit deny all IPv6 rule always terminates the access list. The time-range parameter allows imposing time limitation on the IPv6 ACL rule as defined by the parameter time-range-name. If a time range with the specified name does not exist and the IPv6 ACL containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied immediately. If a time range with specified name exists and the IPv6 ACL containing this ACL rule is applied to an interface or bound to a VLAN, then the ACL rule is applied when the time-range with specified name becomes active. The ACL rule is removed when the time-range with specified name becomes inactive. For information about configuring time ranges, see Time Range Commands for Time-Based ACLs on page 990. The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule. The allowed queue-id value is 0-(n-1), in which n is the number of user configurable queues available for the hardware platform. The assign-queue parameter is valid only for a permit rule. The mirror parameter allows the traffic matching this rule to be copied to the specified unit/slot/port, while the redirect parameter allows the traffic matching this rule to be forwarded to the specified unit/slot/port. The assign-queue and redirect parameters are only valid for a permit rule. The permit command's optional attribute rate-limit allows you to permit only the allowed rate of traffic as per the configured rate in kbps, and burst-size in kbytes. IPv6 ACLs have the following limitations: • Port ranges are not supported for egress IPv6 ACLs. • The rate-limit command is not supported for egress IPv6 ACLs. Quality of Service Commands 983 CLI Command Reference Manual