Web
– Specify the action (i.e., Permit or Deny). Select the address type (Any or
IPv6-prefix). If you select “IPv6-prefix,” enter a subne t add re ss a nd pr efix le ngth. S et
any other required criteria, such as next header, DSCP, or flow label. Then c lic k Ad d.
Figure 7-6 ACL Configuration - Extended IPv6
CLI
– This example adds three rules:
1. Accepts any incoming packets for the de stination 2009:D B9:2229: :79/4 8.
2. Allows packets to any destination address when the DSCP value is 5.
3. Allows any packets sent to the destination 2009:DB9:2229:: 79/48 when t he flow
label is 43.
Console(config-ext-ipv6-acl)#permit 2009:DB9:2229::79/48 26-9
Console(config-ext-ipv6-acl)#permit any dscp 5
Console(config-ext-ipv6-acl)#permit 2009:DB9:2229::79/48 flow-label 43
Console(config-ext-ipv6-acl)#
7-10
Access Control Lists
7