`class ipv6`

Syntax

class ipv6 <CLASS-NAME>

    [<SEQUENCE-NUMBER>]
    {match|ignore}
    {any|ah|gre|esp|icmpv6|igmp|ospf|pim|<IP-PROTOCOL-NUM>}
    {any|<SRC-IP-ADDRESS>[/{<PREFIX-LENGTH>|<SUBNET-MASK>}]}
    {any|<DST-IP-ADDRESS>[/{<PREFIX-LENGTH>|<SUBNET-MASK>}]}
    [dscp {AF11|AF12|AF13|AF21|AF22|AF23|AF31|AF32|AF33|AF41|AF42|AF43|
     CS0|CS1|CS2|CS3|CS4|CS5|CS6|CS7|EF|<DSCP-VALUE>}] 
    [ecn <ECN-VALUE>]
    [ip-precedence <IP-PRECEDENCE-VALUE>] [tos <TOS-VALUE>]
    [fragment] [vlan <VLAN-ID>] [ttl <TTL-VALUE>] [count] 

    [<SEQUENCE-NUMBER>]
    {match|ignore}
    {sctp|tcp|udp}
    {any|<SRC-IP-ADDRESS>[/{<PREFIX-LENGTH>|<SUBNET-MASK>}]}
    [{eq|gt|lt} <PORT>|range <MIN-PORT> <MAX-PORT>]
    {any|<DST-IP-ADDRESS>[/{<PREFIX-LENGTH>|<SUBNET-MASK>}]}
    [{eq|gt|lt} <PORT>|range <MIN-PORT> <MAX-PORT>]
    [cwr] [ece] [urg] [ack] [psh] [rst] [syn] [fin] [established]
    [dscp {AF11|AF12|AF13|AF21|AF22|AF23|AF31|AF32|AF33|AF41|AF42|AF43|
     CS0|CS1|CS2|CS3|CS4|CS5|CS6|CS7|EF|<DSCP-VALUE>}] [ecn <ECN-VALUE>]
    [ip-precedence <IP-PRECEDENCE-VALUE>] [tos <TOS-VALUE>]
    [fragment] [vlan <VLAN-ID>] [ttl <TTL-VALUE>] [count] 

    [<SEQUENCE-NUMBER>] comment <TEXT-STRING>

Description

Creates or modifies an IPv6 traffic class to match specified packets. Class is composed of one or more class entries ordered and prioritized by sequence numbers. With this command, each class can classify traffic based on IPv6 header information.

The no form of the command deletes either an IPv6 traffic class (use no with the class command) or an individual IPv6 traffic class entry (use no with the sequence number).

Command context

config

The class ipv6 <CLASS-NAME> command takes you into the config-class-ipv6 command context where you enter the class entries.

Parameters

ipv6

Specifies create or modify an IPv6 class.

<CLASS-NAME>

Specifies the name of this class.

<SEQUENCE-NUMBER>

Specifies a sequence number for the class entry. Optional. Range: 1-4294967295.

{match|ignore}

Creates a rule to match or ignore specified packets.

comment

Specifies storing the remaining entered text as a class comment.

protocol

Specifies an IP protocol number or name from the following (enter one only, as indicated in the command syntax):

any - Any IP protocol
ah
gre
esp
icmpv6
igmp
ospf (version 3)
pim
sctp
tcp
udp
<IP-PROTOCOL-NUM> - Enter an IP protocol number. Range: 1-255.

{any|<SRC-IP-ADDRESS>[/{<PREFIX-LENGTH>|<SUBNET-MASK>}]}

Specifies the source IP host, network address, or the keyword any. You can optionally include the following:

<PREFIX-LENGTH> - The address bits to mask (CIDR subnet mask notation). Range: 1-128.
<SUBNET-MASK> - The address bits to mask (dotted decimal notation).

{any|<DST-IP-ADDRESS>[/{<PREFIX-LENGTH>|<SUBNET-MASK>}]}

Specifies the destination IP host, network address, or the keyword any. You can optionally include the following:

<PREFIX-LENGTH> - The address bits to mask (CIDR subnet mask notation). Range: 1-128.
<SUBNET-MASK> - The address bits to mask (dotted decimal notation).

[{eq|gt|lt} <PORT>|range <MIN-PORT> <MAX-PORT>]

Specifies matching using one of the following keywords:

eq - Layer 4 port is equal to the specified port.
gt - Layer 4 port is greater than the specified port.
lt - Layer 4 port is less than the specified port.

Relative to either:

<PORT> - A single Layer 4 port (range 0-65535).
range <MIN-PORT> <MAX-PORT> - A layer 4 port from the minimum to the maximum port inclusive.

cwr, ece, urg, ack, psh, rst, syn, fin, established

These TCP flag matching parameters are not supported.

dscp

Specifies a Differentiated Services Code Point (DSCP) value. Enter either a numeric <DSCP-VALUE> (0-63) or a keyword as follows:

AF11 - DSCP 10 (Assured Forwarding Class 1, low drop probability)
AF12 - DSCP 12 (Assured Forwarding Class 1, medium drop probability)
AF13 - DSCP 14 (Assured Forwarding Class 1, high drop probability)
AF21 - DSCP 18 (Assured Forwarding Class 2, low drop probability)
AF22 - DSCP 20 (Assured Forwarding Class 2, medium drop probability)
AF23 - DSCP 22 (Assured Forwarding Class 2, high drop probability)
AF31 - DSCP 26 (Assured Forwarding Class 3, low drop probability)
AF32 - DSCP 28 (Assured Forwarding Class 3, medium drop probability)
AF33 - DSCP 30 (Assured Forwarding Class 3, high drop probability)
AF41 - DSCP 34 (Assured Forwarding Class 4, low drop probability)
AF42 - DSCP 36 (Assured Forwarding Class 4, medium drop probability)
AF43 - DSCP 38 (Assured Forwarding Class 4, high drop probability)
CS0 - DSCP 0 (Class Selector 0: Default)
CS1 - DSCP 8 (Class Selector 1: Scavenger)
CS2 - DSCP 16 (Class Selector 2: OAM)
CS3 - DSCP 24 (Class Selector 3: Signaling)
CS4 - DSCP 32 (Class Selector 4: Realtime)
CS5 - DSCP 40 (Class Selector 5: Broadcast video)
CS6 - DSCP 48 (Class Selector 6: Network control)
CS7 - DSCP 56 (Class Selector 7)
EF - DSCP 46 (Expedited Forwarding)

ecn <ECN-VALUE>

Specifies an Explicit Congestion Notification value. Range: 0- 3.

ip-precedence <IP-PRECEDENCE-VALUE>

Specifies an IP precedence value. Range: 0-7.

tos <TOS-VALUE>

Specifies the traffic class. Range: 0-31.

fragment

Not supported.

vlan <VLAN-ID>

Not supported.

ttl <TTL-VALUE>

Not supported.

count

Keep hit counts of the number of packets matching this class entry.

Authority

Administrators

Usage

If you enter an existing <CLASS-NAME> value, the existing class is modified with any new <SEQUENCE-NUMBER> value. This action creates an additional class entry. Any existing <SEQUENCE-NUMBER> value replaces the existing class entry with the same sequence number.
If no sequence number is specified, a new class entry is appended to the end of the class with a sequence number equal to the highest policy entry currently in the list plus 10.

Examples

Creating an IPv6 class with two entries:

switch(config)# class ipv6 MY_IPV6_CLASS
switch(config-class-ipv6)# 10 match icmpv6 any any
switch(config-class-ipv6)# 20 ignore udp any any
switch(config-class-ipv6)# exit

switch(config)# do show class
Type       Name
  Sequence Comment
           Action                          L3 Protocol
           Source IP Address               Source L4 Port(s)
           Destination IP Address          Destination L4 Port(s)
           Additional Parameters
-------------------------------------------------------------------------------
IPv6       MY_IPV6_CLASS
        10 match                           icmpv6
           any
           any
        20 ignore                          udp
           any
           any

Adding a comment to an existing IPv6 class entry:

switch(config)# class ipv6 MY_IPV6_CLASS
switch(config-class-ipv6)# 10 match icmpv6 any any
switch(config-class-ipv6)# 20 ignore udp any any
switch(config-class-ipv6)# 20 comment myipv6class
switch(config-class-ipv6)# exit

switch(config)# do show class
Type       Name
  Sequence Comment
           Action                          L3 Protocol
           Source IP Address               Source L4 Port(s)
           Destination IP Address          Destination L4 Port(s)
           Additional Parameters
-------------------------------------------------------------------------------
IPv6       MY_IPV6_CLASS
        10 match                           icmpv6
           any
           any
        20 myipv6Class
           ignore                          udp
           any
           any

Removing a comment from an existing IPv6 class entry:

switch(config)# class ipv6 MY_IPV6_CLASS
switch(config-class-ipv6)# no 20 comment
switch(config-class-ipv6)# exit

switch(config)# do show class
Type       Name
  Sequence Comment
           Action                          L3 Protocol
           Source IP Address               Source L4 Port(s)
           Destination IP Address          Destination L4 Port(s)
           Additional Parameters
-------------------------------------------------------------------------------
IPv6       MY_IPV6_CLASS
        10 match                           icmpv6
           any
           any
        20 ignore                          udp
           any
           any

Replacing an IPv6 class entry in an existing IPv6 class:

switch(config)# class ipv6 MY_IPV6_CLASS
switch(config-class-ipv6)# 10 match any any 1020::
switch(config-class-ipv6)# exit

switch(config)# do show class
Type       Name
  Sequence Comment
           Action                          L3 Protocol
           Source IP Address               Source L4 Port(s)
           Destination IP Address          Destination L4 Port(s)
           Additional Parameters
-------------------------------------------------------------------------------
IPv6       MY_IPV6_CLASS
        10 match                           any
           any
           1020::
        20 ignore                          udp
           any
           any

Removing an IPv6 class entry:

switch(config)# class ipv6 MY_IPV6_CLASS
switch(config-class-ipv6)# no 10
switch(config-class-ipv6)# exit

switch(config)# do show class
Type       Name
  Sequence Comment
           Action                          L3 Protocol
           Source IP Address               Source L4 Port(s)
           Destination IP Address          Destination L4 Port(s)
           Additional Parameters
-------------------------------------------------------------------------------
IPv6       MY_IPV6_CLASS
        20 ignore                          udp
           any
           any

Removing an IPv6 class. Removing a class with entries removes all its entries as well. If a class associated with a policy entry (or multiple policy entries) is removed, the corresponding entries are also removed.

switch(config)# no class ipv6 MY_IPV6_CLASS

switch(config)# do show class
Type       Name
  Sequence Comment
           Action                          L3 Protocol
           Source IP Address               Source L4 Port(s)
           Destination IP Address          Destination L4 Port(s)
           Additional Parameters
-------------------------------------------------------------------------------
IPv6       MY_IPV6_CLASS2
        20 ignore                          udp
           any
           any