ipv6acl:ACE

IPv6 access-list entry

Telemetry Sensor Path(s)
Configurable Properties
PROPERTY NAME DATA TYPE DESCRIPTION PERMITTED VALUES
ack scalar:Bool
 tcp ack SELECTION: true or false
action acl:ActionType
(scalar:Enum8)		 Specify packets to forward or reject SELECTION:
0 - invalid
1 - permit
2 - deny
DEFAULT: invalid
captureSession acl:CaptureSes
(scalar:Uint16)		 capture session
RANGE: [0 , 48]
DEFAULT: invalid
dscp scalar:UByte
 dscp
RANGE: [0 , 63]
dscpMask scalar:UByte
 dscpMask
RANGE: [0 , 63]
dstAddrGroup acl:Name
(string:Basic)		 Destination address group
MAX SIZE: 63
dstPort1 acl:PortNumber
(scalar:Uint16)		 First destination port number SELECTION:
7 - echo
9 - discard
13 - daytime
19 - chargen
20 - ftp-data
21 - ftp
23 - telnet
25 - smtp
37 - time
42 - nameserver
43 - whois
49 - tacacs
53 - domain
67 - bootps
68 - bootpc
69 - tftp
70 - gopher
79 - finger
80 - www
101 - hostname
109 - pop2
110 - pop3
111 - sunrpc
113 - ident
119 - nntp
123 - ntp
137 - netbios-ns
138 - netbios-dgm
139 - netbios-ss
161 - snmp
162 - snmptrap
177 - xdmcp
179 - bgp
194 - irc
195 - dnsix
434 - mobile-ip
496 - pim-auto-rp
500 - isakmp
512 - biff
512 - exec
513 - who
513 - login
514 - syslog
514 - cmd
515 - lpd
517 - talk
520 - rip
540 - uucp
543 - klogin
544 - kshell
3949 - drip
4500 - non500-isakmp
DEFAULT: 0
dstPort2 acl:PortNumber
(scalar:Uint16)		 Second destination port number SELECTION:
7 - echo
9 - discard
13 - daytime
19 - chargen
20 - ftp-data
21 - ftp
23 - telnet
25 - smtp
37 - time
42 - nameserver
43 - whois
49 - tacacs
53 - domain
67 - bootps
68 - bootpc
69 - tftp
70 - gopher
79 - finger
80 - www
101 - hostname
109 - pop2
110 - pop3
111 - sunrpc
113 - ident
119 - nntp
123 - ntp
137 - netbios-ns
138 - netbios-dgm
139 - netbios-ss
161 - snmp
162 - snmptrap
177 - xdmcp
179 - bgp
194 - irc
195 - dnsix
434 - mobile-ip
496 - pim-auto-rp
500 - isakmp
512 - biff
512 - exec
513 - who
513 - login
514 - syslog
514 - cmd
515 - lpd
517 - talk
520 - rip
540 - uucp
543 - klogin
544 - kshell
3949 - drip
4500 - non500-isakmp
DEFAULT: 0
dstPortGroup acl:Name
(string:Basic)		 Destination port group
MAX SIZE: 63
dstPortMask acl:PortNumber
(scalar:Uint16)		 Destination Port Mask SELECTION:
7 - echo
9 - discard
13 - daytime
19 - chargen
20 - ftp-data
21 - ftp
23 - telnet
25 - smtp
37 - time
42 - nameserver
43 - whois
49 - tacacs
53 - domain
67 - bootps
68 - bootpc
69 - tftp
70 - gopher
79 - finger
80 - www
101 - hostname
109 - pop2
110 - pop3
111 - sunrpc
113 - ident
119 - nntp
123 - ntp
137 - netbios-ns
138 - netbios-dgm
139 - netbios-ss
161 - snmp
162 - snmptrap
177 - xdmcp
179 - bgp
194 - irc
195 - dnsix
434 - mobile-ip
496 - pim-auto-rp
500 - isakmp
512 - biff
512 - exec
513 - who
513 - login
514 - syslog
514 - cmd
515 - lpd
517 - talk
520 - rip
540 - uucp
543 - klogin
544 - kshell
3949 - drip
4500 - non500-isakmp
DEFAULT: 0
dstPortOp acl:Operator
(scalar:Enum8)		 Destination port operator SELECTION:
0 - none
4 - lt
5 - gt
6 - eq
7 - neq
8 - range
DEFAULT: none
dstPrefix ipv6acl:IPv6Prefix
(address:IPv6)		 Destination IPv6 prefix Value must match ipv6 format
dstPrefixLength ipv6acl:IPv6PrefixLen
(scalar:UByte)		 Destination IPv6 prefix length
RANGE: [0 , 128]
DEFAULT: 0
dstPrefixMask ipv6acl:IPv6PrefixMask
(address:IPv6)		 Destination IPv6 prefix mask Value must match ipv6 format
est scalar:Bool
 tcp est SELECTION: true or false
fin scalar:Bool
 tcp fin SELECTION: true or false
flowLabel ipv6acl:FlowLabel
(scalar:Uint32)		 Flow label
RANGE: [0 , 1048576]
fragment scalar:Bool
 Non-initial fragment SELECTION: true or false
httpOption acl:HttpOptionType
(scalar:Enum8)		 http option http-method SELECTION:
0 - invalid
1 - get
2 - put
3 - head
4 - post
5 - delete
6 - trace
7 - connect
DEFAULT: invalid
icmpCode ipv6acl:ICMPCode
(scalar:Uint16)		 ICMPv6 code
RANGE: [0 , 256]
DEFAULT: 256
icmpStr ipv6acl:ICMPEnum
(scalar:Uint16)		 ICMPv6 Str SELECTION:
0 - unreachable
1 - no-route
2 - no-admin
3 - beyond-scope
4 - destination-unreachable
5 - port-unreachable
6 - packet-too-big
7 - time-exceeded
8 - hop-limit
9 - reassembly-timeout
10 - parameter-problem
11 - header
12 - next-header
13 - parameter-option
14 - echo-request
15 - echo-reply
16 - mld-query
17 - mld-report
18 - mld-reduction
19 - router-solicitation
20 - router-advertisement
21 - nd-ns
22 - nd-na
23 - redirect
24 - router-renumbering
25 - renum-command
26 - renum-result
27 - renum-seq-number
28 - mldv2
DEFAULT: 256
icmpType ipv6acl:ICMPType
(scalar:Uint16)		 ICMPv6 type
RANGE: [0 , 256]
DEFAULT: 256
logging scalar:Bool
 Log matches against ACL entry SELECTION: true or false
DEFAULT: false
pktLen1 acl:PktLen
(scalar:Uint16)		 first packet length
RANGE: [19 , 9210]
DEFAULT: invalid
pktLen2 acl:PktLen
(scalar:Uint16)		 second packet length
RANGE: [19 , 9210]
DEFAULT: invalid
pktLenOp acl:Operator
(scalar:Enum8)		 packet length operator SELECTION:
0 - none
4 - lt
5 - gt
6 - eq
7 - neq
8 - range
DEFAULT: none
protocol ipv6acl:Protocol
(scalar:UByte)		 Protocol for access-list entry SELECTION:
0 - ipv6
6 - tcp
17 - udp
47 - gre
50 - esp
51 - ahp
58 - icmp
88 - eigrp
89 - ospf
94 - nos
103 - pim
108 - pcp
132 - sctp
254 - udf
DEFAULT: 255
protocolMask ipv6acl:Protocol
(scalar:UByte)		 Defines the Protocol Mask SELECTION:
0 - ipv6
6 - tcp
17 - udp
47 - gre
50 - esp
51 - ahp
58 - icmp
88 - eigrp
89 - ospf
94 - nos
103 - pim
108 - pcp
132 - sctp
254 - udf
DEFAULT: 255
psh scalar:Bool
 tcp psh SELECTION: true or false
redirect string:Basic
 Redirect action
RANGE: [0 , 576]
remark acl:RemarkStr
(string:Basic)		 Access-list entry comment
MAX SIZE: 99
rev scalar:Bool
 tcp reversed SELECTION: true or false
rst scalar:Bool
 tcp rst SELECTION: true or false
seqNum acl:SequenceNumber
(scalar:Uint32)		 Sequence number
RANGE: [0 , 4294967295]
srcAddrGroup acl:Name
(string:Basic)		 Source address group
MAX SIZE: 63
srcPort1 acl:PortNumber
(scalar:Uint16)		 First source port SELECTION:
7 - echo
9 - discard
13 - daytime
19 - chargen
20 - ftp-data
21 - ftp
23 - telnet
25 - smtp
37 - time
42 - nameserver
43 - whois
49 - tacacs
53 - domain
67 - bootps
68 - bootpc
69 - tftp
70 - gopher
79 - finger
80 - www
101 - hostname
109 - pop2
110 - pop3
111 - sunrpc
113 - ident
119 - nntp
123 - ntp
137 - netbios-ns
138 - netbios-dgm
139 - netbios-ss
161 - snmp
162 - snmptrap
177 - xdmcp
179 - bgp
194 - irc
195 - dnsix
434 - mobile-ip
496 - pim-auto-rp
500 - isakmp
512 - biff
512 - exec
513 - who
513 - login
514 - syslog
514 - cmd
515 - lpd
517 - talk
520 - rip
540 - uucp
543 - klogin
544 - kshell
3949 - drip
4500 - non500-isakmp
DEFAULT: 0
srcPort2 acl:PortNumber
(scalar:Uint16)		 Second source port SELECTION:
7 - echo
9 - discard
13 - daytime
19 - chargen
20 - ftp-data
21 - ftp
23 - telnet
25 - smtp
37 - time
42 - nameserver
43 - whois
49 - tacacs
53 - domain
67 - bootps
68 - bootpc
69 - tftp
70 - gopher
79 - finger
80 - www
101 - hostname
109 - pop2
110 - pop3
111 - sunrpc
113 - ident
119 - nntp
123 - ntp
137 - netbios-ns
138 - netbios-dgm
139 - netbios-ss
161 - snmp
162 - snmptrap
177 - xdmcp
179 - bgp
194 - irc
195 - dnsix
434 - mobile-ip
496 - pim-auto-rp
500 - isakmp
512 - biff
512 - exec
513 - who
513 - login
514 - syslog
514 - cmd
515 - lpd
517 - talk
520 - rip
540 - uucp
543 - klogin
544 - kshell
3949 - drip
4500 - non500-isakmp
DEFAULT: 0
srcPortGroup acl:Name
(string:Basic)		 Source port group
MAX SIZE: 63
srcPortMask acl:PortNumber
(scalar:Uint16)		 Defines the Source Port Mask SELECTION:
7 - echo
9 - discard
13 - daytime
19 - chargen
20 - ftp-data
21 - ftp
23 - telnet
25 - smtp
37 - time
42 - nameserver
43 - whois
49 - tacacs
53 - domain
67 - bootps
68 - bootpc
69 - tftp
70 - gopher
79 - finger
80 - www
101 - hostname
109 - pop2
110 - pop3
111 - sunrpc
113 - ident
119 - nntp
123 - ntp
137 - netbios-ns
138 - netbios-dgm
139 - netbios-ss
161 - snmp
162 - snmptrap
177 - xdmcp
179 - bgp
194 - irc
195 - dnsix
434 - mobile-ip
496 - pim-auto-rp
500 - isakmp
512 - biff
512 - exec
513 - who
513 - login
514 - syslog
514 - cmd
515 - lpd
517 - talk
520 - rip
540 - uucp
543 - klogin
544 - kshell
3949 - drip
4500 - non500-isakmp
DEFAULT: 0
srcPortOp acl:Operator
(scalar:Enum8)		 Source port operator SELECTION:
0 - none
4 - lt
5 - gt
6 - eq
7 - neq
8 - range
DEFAULT: none
srcPrefix ipv6acl:IPv6Prefix
(address:IPv6)		 Source IPv6 prefix Value must match ipv6 format
srcPrefixLength ipv6acl:IPv6PrefixLen
(scalar:UByte)		 Source IPv6 prefix length
RANGE: [0 , 128]
DEFAULT: 0
srcPrefixMask ipv6acl:IPv6PrefixMask
(address:IPv6)		 Source IPv6 prefix mask Value must match ipv6 format
syn scalar:Bool
 tcp syn SELECTION: true or false
tcpFlagsMask acl:TcpFlagsMask
(scalar:UByte)		 tcp flags mask
RANGE: [0 , 64]
DEFAULT: invalid
tcpOptionLength acl:TcpOptionLengthType
(scalar:Uint32)		 TCP options length
RANGE: [0 , 41]
DEFAULT: invalid
telemetryPath scalar:Bool
 telemetry path action SELECTION: true or false
telemetryQueue scalar:Bool
 telemetry queue action SELECTION: true or false
timeRange acl:Name
(string:Basic)		 time range name
MAX SIZE: 63
urg scalar:Bool
 tcp urg SELECTION: true or false
vlan acl:VlanType
(scalar:Uint32)		 vlan
RANGE: [0 , 4095]
DEFAULT: 4095
vni acl:VniType
(scalar:Uint32)		 nve vni ID
RANGE: [0 , 16777216]
DEFAULT: invalid
Operational Properties
PROPERTY NAME DATA TYPE DESCRIPTION POSSIBLE VALUES
configStatus acl:ConfigState
(scalar:UByte)		 config status SELECTION:
0 - configSuccess
1 - configError
DEFAULT: 0
packets scalar:Uint64
 Number of packets hitting ACE RANGE: [0, 18446744073709551615]
Internal Properties
PROPERTY NAME DATA TYPE DESCRIPTION POSSIBLE VALUES
modTs mo:TStamp
(scalar:Date)		 The time when this object was last modified. SELECTION:
0 - never
DEFAULT: never
status mo:ModificationStatus
(scalar:Bitmask32)		 The upgrade status. This property is for internal use only. SELECTION:
2 - created
4 - modified
8 - deleted
16 - replaced