Dell Force10 S55T FTOS Command Line Reference Guide for the S55 System FTOS 8. - Page 561

17 IPv6 Access Control Lists (IPv6 ACLs) Overview IPv6 ACLs and IPv6 Route Map commands are supported on platforms c e s • IPv6 ACL Commands • IPv6 Route Map Commands Note: For IPv4 ACL commands, see Chapter 7, Access Control Lists (ACL). Important Points to Remember • S-Series systems support Ingress IPv6 ACLs. • The S55 supports both Ingress and Egress IPv6 ACLs.E-Series platforms require IPv6-ExtACL CAM profile to support IPv6 ACLs. • C-Series platforms require manual CAM usage space allotment. Refer to cam-acl later in this document. • Egress IPv6 ACL and IPv6 ACL on Loopback interface is not supported. • Reference to an empty ACL will permit any traffic. • ACLs are not applied to self-originated traffic (e.g. Control Protocol traffic not affected by IPv6 ACL since the routed bit is not set for Control Protocol traffic and for egress ACLs the routed bit must be set). • The same access list name can be used for both IPv4 and IPv6 ACLs. • Both IPv4 and IPv6 ACLs can be applied on an interface at the same time. • IPv6 ACLs can be applied on physical interfaces and a logical interfaces (Port-channel/VLAN). • Non-contiguous masks are not supported in source or destination addresses in IPv6 ACL entries. • Since prefix mask is specified in /x format in IPv6 ACLs, inverse mask is not supported. IPv6 ACL Commands The following commands configure IPv6 ACLs: • cam-acl • clear counters ipv6 access-group • deny • deny icmp • deny tcp • deny udp IPv6 Access Control Lists (IPv6 ACLs) | 561