Cisco Cisco Packet Data Gateway (PDG)
IPv6 ACL Configuration Mode Commands
▀ redirect css service (for uplink, by TCP/UDP packets)
▄ Command Line Interface Reference, StarOS Release 18
6804
host
Specifies that the rule definition applies to a specific host as determined by its IP address.
source_host_address
The IP address of the source host to filter against expressed in IPv6 colon notation.
dest_host_address
The IP address of the destination host to filter against expressed in IPv6 colon notation.
eq source_port
Specifies a single, specific source TCP port number to be filtered.
source_port
must be configured to an integer value from 0 to 65535.
gt source_port
Specifies that all source TCP port numbers greater than the one specified are to be filtered.
source_port
must be configured to an integer value from 0 to 65535.
lt source_port
Specifies that all source TCP port numbers less than the one specified are to be filtered.
source_port
must be configured to an integer value from 0 to 65535.
neq source_port
Specifies that all source TCP port numbers not equal to the one specified are to be filtered.
source_port
must be configured to an integer value from 0 to 65535.
range start_source_port end_source_port
Specifies that all source TCP ports within a specific range are to be filtered.
start_source_port
is the initial port in the range and
end_source_port
is the final port in the range.
Both
start_source_port
and
end_source_port
can be configured to an integer value from 0 to 65535.
dest_address
The IP address(es) to which the packet is to be sent.
This option is used to filter all packets to a specific IP address or a group of IP addresses.
When specifying a group of addresses, the initial address is configured using this parameter. The range can
then be configured using the
This option is used to filter all packets to a specific IP address or a group of IP addresses.
When specifying a group of addresses, the initial address is configured using this parameter. The range can
then be configured using the
dest_wildcard
parameter.
dest_wildcard
This option is used in conjunction with the
dest_address
option to specify a group of addresses for which
packets are to be filtered.
The mask must be entered as a complement:
The mask must be entered as a complement:
Zero-bits in this parameter mean that the corresponding bits configured for the
dest_address
parameter must be identical.
One-bits in this parameter mean that the corresponding bits configured for the
dest_address
parameter must be ignored.