705FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell ContaxCLI\files\ACL.fmD E L L C O N F I D E N T I A L – P R E L I M I N A R Y 2 0 1 2 - F O R P R O O F O N LYCommand ModeIpv6 Access-list Configuration modeUser GuidelinesThe number of TCP/UDP ranges that can be defined in ACLs is limited. Youcan define up to #ASIC-specific ranges for TCP and up to #ASIC-specificranges for UDP. If a range of ports is used for a source port in ACE it would benot be counted again if it is also used for a source port in another ACE. If arange of ports is used for destination port in ACE it would be not be countedagain if it is also used for destination port in another ACE.If a range of ports is used for source port it would be counted again if it is alsoused for destination port.Exampleconsole(config)# ipv6 access-list serverconsole(config-ipv6-al)# permit tcp 3001::2/64 any any 80deny ( IPv6 )Use the deny command in IPv6 access list configuration mode to set permitconditions for IPv6 access list.Syntaxdenyprotocol {any | {source-prefix/length }{any | destination- prefix/length} [dscp number | precedence number] [time-range time-range-name][disable-port | log-input]denyicmp {any | {source-prefix/length }{any | destination- prefix/length }{any|icmp-type} {any|icmp-code} [dscp number | precedence number][time-range time-range-name] [disable-port | log-input]denytcp {any | {source-prefix/length } {any | source-port/port-range} }{any| destination- prefix/length } {any| destination-port/port-range} [dscpnumber | precedence number] [match-all list-of-flags] [time-range time-range-name] [disable-port | log-input]
