Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 115
- Page / 149
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
ServerIron ADX NAT64 Configuration Guide 103
53-1002444-02
Configuring IPv6 ACLs
6
DRAFT: BROCADE CONFIDENTIAL
Table 13 describes the syntax used to configure IPv6 ACLs.
TABLE 13 Syntax descriptions
Syntax Description
ipv6 access-list <acl-name> Enables the IPv6 configuration level and defines the name of the
IPv6 ACL. The <acl-name> can contain up to 199 characters and
numbers, but cannot begin with a number and cannot contain any
spaces or quotation marks.
permit The ACL will permit (forward) packets that match a policy in the ACL.
deny The ACL will deny (drop) packets that match a policy in the ACL.
icmp Indicates the you are filtering ICMP packets.
<protocol> The type of IPv6 packet you are filtering. You can specify a
well-known name for a protocol with a number less than 255. For
other protocols, you must enter the number. Enter “?” instead of a
protocol to list the well-known names recognized by the CLI. IPv6
protocols include:
AHP: Authentication Header
ESP: Encapsulating Security Payload
ICMP: Internet Protocol Message Protocol
IPv6: Internet Protocol version 6
SCTP: Stream Control Transmission Protocol
TCP: Transmission Control Protocol
UDP: User Datagram Protocol
<ipv6-source-prefix/prefix-length>The <ipv6-source-prefix/prefix-length> variable specifies a source
prefix and prefix length that a packet must match for the specified
action (deny or permit) to occur. You must specify the
<ipv6-source-prefix> variable in hexadecimal using 16-bit values
between colons as documented in RFC 2373. You must specify the
<prefix-length> variable as a decimal value. A slash mark (/) must
follow the <ipv6-source-prefix> variable and precede the
<prefix-length> variable.
<ipv6-destination-prefix/prefix-length>The <ipv6-destination-prefix/prefix-length> variable specifies a
destination prefix and prefix length that a packet must match for the
specified action (deny or permit) to occur. You must specify the
<ipv6-destination-prefix> variable in hexadecimal using 16-bit
values between colons as documented in RFC 2373. You must
specify the <prefix-length> variable as a decimal value. A slash
mark (/) must follow the <ipv6-destination-prefix> variable and
precede the <prefix-length> variable.
<source-ipv6-address>
<ipv6-destination-address>
any When specified instead of the <ipv6-source-prefix>/<prefix-length>
or <ipv6-destination-prefix>/<prefix-length> variables, matches any
IPv6 prefix and is equivalent to the IPv6 prefix::/0.
host Allows you specify a host IPv6 address. When you use this
parameter, you do not need to specify the prefix length. A prefix
length of all 128 is implied.
<icmp-message> ICMP packets are filtered by ICMP messages. See the "Configuring
IPv6 ICMP Features" section of the "Configuring IPv6 Connectivity"
chapter of the ServerIron ADX TrafficWorks Switching and Routing
Guide.
- ServerIron ADX 1
- Document History 2
- Contents 3
- About This Document 9
- Command syntax conventions 10
- Notice to the reader 11
- Related publications 11
- Getting technical help 11
- NAT64 and NAT46 Overview 13
- Stateless NAT46 translation 14
- Protocol support 15
- NAT64 fragmentation support 17
- References 18
- Stateful NAT64 Configuration 19
- Operation of stateful NAT64 20
- 53-1002444-02 23
- Enabling connection logging 28
- Displaying NAT64 information 31
- Displaying NAT64 translations 32
- Displaying NAT64 statistics 33
- Displaying NAT64 resources 37
- Stateless NAT64 Configuration 39
- Operation of stateless NAT64 40
- High availability for NAT64 52
- Clearing NAT64 information 53
- Stateless NAT46 Configuration 55
- Operation of stateless NAT46 56
- High availability for NAT46 67
- Displaying NAT46 information 68
- Clearing NAT46 information 69
- Access Control Lists 71
- Rule-based ACLs 72
- Default ACL action 74
- ACL IDs and entries 74
- Configuring rule-based ACLs 77
- Modifying rule-based ACLs 85
- Reordering ACLs 86
- Applying ACLs to interfaces 87
- Adding comments to named ACLs 89
- ACL logging 94
- Displaying ACL log entries 95
- Clearing the ACL statistics 97
- Throttling the fragment rate 98
- DRAFT: BROCADE CONFIDENTIAL 100
- Enabling strict TCP mode 101
- Enabling strict UDP mode 102
- ACLs and ICMP 103
- Numbered ACLs 104
- Named ACLs 105
- • Enable the strict TCP mode 107
- IPv6 Access Control Lists 109
- Configuration notes 110
- Processing of IPv6 ACLs 110
- Configuring IPv6 ACLs 111
- IPv6 ACL syntax 114
- Syntax Description 116
- Displaying IPv6 ACLs 118
- Logging IPv6 ACLs 119
- Network Address Translation 121
- Configuring NAT 122
- Configuring static NAT 123
- Configuring dynamic NAT 123
- Enabling IP NAT 124
- NAT configuration examples 125
- IP NAT with VIP overlap 129
- Translation timeouts 130
- Stateless static IP NAT 132
- IP NAT redundancy 133
- Displaying NAT information 144
- Displaying NAT translation 147
- Displaying VRRPE information 148
Related products and manuals for Network switches Brocade Communications Systems ServerIron ADX 12.4.00
(16 pages)
(82 pages)© 2020, manymanuals.com. All rights reserved. | 1.628 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals