• Source Prefix-Length – A decimal value indicating how man y contiguou s bits
(from the left) of the address comprise the prefix (i.e., the netw ork por tion of the
address).
Web
– Specify the action (i.e., Permit or Deny). Select the address type (Any, Host ,
or IPv6-prefix). If you select “Host,” enter a specific address. If you select
“IPv6-prefix,” enter a subnet address and the prefix length. Then click Add.
Figure 7-5 ACL Configuration - Standard IPv6
CLI – This example configu res one perm it rule for the specific address
2009:DB9:2229::79 and another rule for addresses with the network prefi x
2009:DB9:2229:5::/64.
Console(config-std-ipv6-acl)#permit host 2009:DB9:2229::79
Console(config-std-ipv6-acl)#permit 2009:DB9:2229:5::/64
Console(config-std-ipv6
-
a
c
l)#
26
-
8
Configuring an Extended IPv6 ACL
Command Attributes
• Action – An ACL can contain any combination of permit or de ny rules.
• Destination Address Type – Specifies the destination IP address. U se “Any ” t o
include all possible addresses, or “IPv6-prefix” to specify a range of a ddresses.
(Options: Any, IPv6-prefix; Default: Any)
•
Destination IP Address
– The address must be formatted according to RFC 2373
“IPv6 Addressing Architecture,” using 8 colon-separated 16-bit hexadecimal
values. One double colon may be use d in the ad dress to indicate the ap prop riate
number of zeros required to fill the unde fined fie lds. (Th e switch only checks t he
first 64 bits of the destination address.)

7-8

Access Control Lists

7