Permit/deny options
You can use the following criteria as options for permitting or denying a packet:
source IPv6 address
destination IPv6 address
- IPv6 protocol options:
all IPv6 traffic
IPv6 traffic of a specific protocol type (0-255)
- IPv6 traffic for a specific TCP port or range of ports, including:
optional control of connection (established) traffic based on whether the initial request should be allowed
TCP flag (control bit) options
IPv6 traffic for a specific UDP port or range of ports
IPv6 traffic for a specific ICMP type and code
any of the above with specific DSCP precedence or ToS settings
Carefully plan ACL applications before configuring specific ACLs. For more information on this topic, see Configuring and assigning an ACL.