IPI-ACL-IPV6
Configure redirect interface name
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: union
Attribute Name: destination-address
Attribute Type: union
Attribute Name: dscp
Attribute Type: union
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any|X:X::X:X/M|X:X::X:X X:X::X:X) (any|X:X::X:X/M|X:X::X:X X:X::X:X) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7|<0-63>)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure name
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: destination-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: tcp-destination-port
Attribute Type: union
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<destination-port-operator>eq</destination-port-operator> <!-- operation="delete"-->
<tcp-destination-port>echo</tcp-destination-port> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) (any) (eq|neq|lt|gt) (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip|<0-65535>) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure type
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: lower-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<lower-destination-port-in-range>0</lower-destination-port-in-range> <!-- operation="delete"-->
<upper-destination-port-in-range>0</upper-destination-port-in-range> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) (any) range <0-65535> <0-65535> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure sequence id
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: fragments
Attribute Type: empty
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
</fragments><!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) (any) fragments (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure forwarding action
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: source-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: tcp-source-port
Attribute Type: union
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<source-port-operator>eq</source-port-operator> <!-- operation="delete"-->
<tcp-source-port>echo</tcp-source-port> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) (eq|neq|lt|gt) (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip|<0-65535>) (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure protocol tcp
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: source-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: tcp-source-port
Attribute Type: enum (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: destination-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: tcp-destination-port
Attribute Type: enum (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<source-port-operator>eq</source-port-operator> <!-- operation="delete"-->
<tcp-source-port>echo</tcp-source-port> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<destination-port-operator>eq</destination-port-operator> <!-- operation="delete"-->
<tcp-destination-port>echo</tcp-destination-port> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) (eq|neq|lt|gt) (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip) (any) (eq|neq|lt|gt) (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure source address
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: source-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: tcp-source-port
Attribute Type: enum (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: lower-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<source-port-operator>eq</source-port-operator> <!-- operation="delete"-->
<tcp-source-port>echo</tcp-source-port> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<lower-destination-port-in-range>0</lower-destination-port-in-range> <!-- operation="delete"-->
<upper-destination-port-in-range>0</upper-destination-port-in-range> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) (eq|neq|lt|gt) (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip) (any) range <0-65535> <0-65535> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure lower source port in range
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: lower-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<lower-source-port-in-range>0</lower-source-port-in-range> <!-- operation="delete"-->
<upper-source-port-in-range>0</upper-source-port-in-range> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) range <0-65535> <0-65535> (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure upper source port in range
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: lower-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: destination-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: tcp-destination-port
Attribute Type: enum (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<lower-source-port-in-range>0</lower-source-port-in-range> <!-- operation="delete"-->
<upper-source-port-in-range>0</upper-source-port-in-range> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<destination-port-operator>eq</destination-port-operator> <!-- operation="delete"-->
<tcp-destination-port>echo</tcp-destination-port> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) range <0-65535> <0-65535> (any) (eq|neq|lt|gt) (echo|discard|daytime|chargen|ftp-data|ftp|ssh|telnet|smtp|time|whois|tacacs|domain|gopher|finger|www|hostname|pop2|pop3|sunrpc|ident|nntp|bgp|irc|pim-auto-rp|exec|login|cmd|lpd|talk|uucp|klogin|kshell|drip) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure destination address
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-tcp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: lower-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: lower-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: tcp-flags
Attribute Type: bits (ack|established|fin|psh|rst|syn|urg)
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-tcp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<lower-source-port-in-range>0</lower-source-port-in-range> <!-- operation="delete"-->
<upper-source-port-in-range>0</upper-source-port-in-range> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<lower-destination-port-in-range>0</lower-destination-port-in-range> <!-- operation="delete"-->
<upper-destination-port-in-range>0</upper-destination-port-in-range> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<tcp-flags>ack</tcp-flags> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) tcp (any) range <0-65535> <0-65535> (any) range <0-65535> <0-65535> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) ({ack|established|fin|psh|rst|syn|urg}|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure protocol udp
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure destination port operator
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: destination-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: udp-destination-port
Attribute Type: union
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<destination-port-operator>eq</destination-port-operator> <!-- operation="delete"-->
<udp-destination-port>echo</udp-destination-port> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) (any) (eq|neq|lt|gt) (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp|<0-65535>) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure lower destination port in range
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: lower-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<lower-destination-port-in-range>0</lower-destination-port-in-range> <!-- operation="delete"-->
<upper-destination-port-in-range>0</upper-destination-port-in-range> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) (any) range <0-65535> <0-65535> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure fragments
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: fragments
Attribute Type: empty
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
</fragments><!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) (any) fragments (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure source port operator
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: source-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: udp-source-port
Attribute Type: union
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<source-port-operator>eq</source-port-operator> <!-- operation="delete"-->
<udp-source-port>echo</udp-source-port> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) (eq|neq|lt|gt) (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp|<0-65535>) (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure udp source port
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: source-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: udp-source-port
Attribute Type: enum (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: destination-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: udp-destination-port
Attribute Type: enum (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<source-port-operator>eq</source-port-operator> <!-- operation="delete"-->
<udp-source-port>echo</udp-source-port> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<destination-port-operator>eq</destination-port-operator> <!-- operation="delete"-->
<udp-destination-port>echo</udp-destination-port> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) (eq|neq|lt|gt) (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp) (any) (eq|neq|lt|gt) (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure upper destination port in range
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: source-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: udp-source-port
Attribute Type: enum (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: lower-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<source-port-operator>eq</source-port-operator> <!-- operation="delete"-->
<udp-source-port>echo</udp-source-port> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<lower-destination-port-in-range>0</lower-destination-port-in-range> <!-- operation="delete"-->
<upper-destination-port-in-range>0</upper-destination-port-in-range> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) (eq|neq|lt|gt) (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp) (any) range <0-65535> <0-65535> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure dscp
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: lower-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<lower-source-port-in-range>0</lower-source-port-in-range> <!-- operation="delete"-->
<upper-source-port-in-range>0</upper-source-port-in-range> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) range <0-65535> <0-65535> (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure udp destination port
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: lower-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: destination-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: udp-destination-port
Attribute Type: enum (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<lower-source-port-in-range>0</lower-source-port-in-range> <!-- operation="delete"-->
<upper-source-port-in-range>0</upper-source-port-in-range> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<destination-port-operator>eq</destination-port-operator> <!-- operation="delete"-->
<udp-destination-port>echo</udp-destination-port> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) range <0-65535> <0-65535> (any) (eq|neq|lt|gt) (echo|discard|time|nameserver|tacacs|domain|bootps|bootpc|tftp|sunrpc|ntp|netbios-ns|netbios-dgm|netbios-ss|snmp|snmptrap|xdmcp|dnsix|mobile-ip|pim-auto-rp|isakmp|biff|who|syslog|talk|rip|non500-isakmp) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure flow label
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-udp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: lower-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-source-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: lower-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: upper-destination-port-in-range
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-udp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<lower-source-port-in-range>0</lower-source-port-in-range> <!-- operation="delete"-->
<upper-source-port-in-range>0</upper-source-port-in-range> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<lower-destination-port-in-range>0</lower-destination-port-in-range> <!-- operation="delete"-->
<upper-destination-port-in-range>0</upper-destination-port-in-range> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) udp (any) range <0-65535> <0-65535> (any) range <0-65535> <0-65535> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure protocol icmp
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-icmp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-icmp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) icmpv6 (any) (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure icmp message
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-icmp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: icmp-message
Attribute Type: enum (beyond-scope|destination-unreachable|echo-reply|echo-request|header|hop-limit|mld-query|mld-reduction|mld-report|nd-na|nd-ns|next-header|no-admin|no-route|packet-too-big|parameter-option|parameter-problem|port-unreachable|reassembly-timeout|redirect|renum-command|renum-result|renum-seq-number|router-advertisement|router-renumbering|router-solicitation|time-exceeded|unreachable)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-icmp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<icmp-message>beyond-scope</icmp-message> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) icmpv6 (any) (any) (beyond-scope|destination-unreachable|echo-reply|echo-request|header|hop-limit|mld-query|mld-reduction|mld-report|nd-na|nd-ns|next-header|no-admin|no-route|packet-too-big|parameter-option|parameter-problem|port-unreachable|reassembly-timeout|redirect|renum-command|renum-result|renum-seq-number|router-advertisement|router-renumbering|router-solicitation|time-exceeded|unreachable) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure icmp type
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-icmp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: icmp-type
Attribute Type: uint8
Attribute Range: 0-255
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-icmp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<icmp-type>0</icmp-type> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) icmpv6 (any) (any) <0-255> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure icmp code
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-icmp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: icmp-type
Attribute Type: uint8
Attribute Range: 0-255
Attribute Name: icmp-code
Attribute Type: uint8
Attribute Range: 0-255
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-icmp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<icmp-type>0</icmp-type> <!-- operation="delete"-->
<icmp-code>0</icmp-code> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) icmpv6 (any) (any) <0-255> <0-255> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure vlan id
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-icmp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: fragments
Attribute Type: empty
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-icmp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
</fragments><!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) icmpv6 (any) (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) fragments (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure inner vlan id
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-icmp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: icmp-message
Attribute Type: enum (beyond-scope|destination-unreachable|echo-reply|echo-request|header|hop-limit|mld-query|mld-reduction|mld-report|nd-na|nd-ns|next-header|no-admin|no-route|packet-too-big|parameter-option|parameter-problem|port-unreachable|reassembly-timeout|redirect|renum-command|renum-result|renum-seq-number|router-advertisement|router-renumbering|router-solicitation|time-exceeded|unreachable)
Attribute Name: fragments
Attribute Type: empty
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-icmp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<icmp-message>beyond-scope</icmp-message> <!-- operation="delete"-->
</fragments><!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) icmpv6 (any) (any) (beyond-scope|destination-unreachable|echo-reply|echo-request|header|hop-limit|mld-query|mld-reduction|mld-report|nd-na|nd-ns|next-header|no-admin|no-route|packet-too-big|parameter-option|parameter-problem|port-unreachable|reassembly-timeout|redirect|renum-command|renum-result|renum-seq-number|router-advertisement|router-renumbering|router-solicitation|time-exceeded|unreachable) fragments (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure monitor action
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-icmp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: icmp-type
Attribute Type: uint8
Attribute Range: 0-255
Attribute Name: fragments
Attribute Type: empty
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-icmp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<icmp-type>0</icmp-type> <!-- operation="delete"-->
</fragments><!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) icmpv6 (any) (any) <0-255> fragments (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure protocol sctp
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-sctp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-sctp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) sctp (any) (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure sctp destination port
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-sctp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: destination-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: sctp-destination-port
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-sctp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<destination-port-operator>eq</destination-port-operator> <!-- operation="delete"-->
<sctp-destination-port>0</sctp-destination-port> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) sctp (any) (any) (eq|neq|lt|gt) <0-65535> (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure sctp source port
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-sctp
Attribute Type: empty
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: source-port-operator
Attribute Type: enum (eq|neq|lt|gt)
Attribute Name: sctp-source-port
Attribute Type: uint16
Attribute Range: 0-65535
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
</protocol-sctp><!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<source-port-operator>eq</source-port-operator> <!-- operation="delete"-->
<sctp-source-port>0</sctp-source-port> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) sctp (any) (eq|neq|lt|gt) <0-65535> (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure protocol name
Use this attribute to set the interface name on which packet to be redirected (in-direction only)
This command is supported when following feature are enabled IPV6 feature
Attribute Name: redirect-interface-name
Attribute Type: string
Attribute Name: forwarding-action
Attribute Type: enum (deny|permit)
Attribute Name: protocol-name
Attribute Type: union
Attribute Name: source-address
Attribute Type: enum (any)
Attribute Name: destination-address
Attribute Type: enum (any)
Attribute Name: dscp
Attribute Type: enum (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)
Attribute Name: flow-label
Attribute Type: uint32
Attribute Range: 0-1048575
Attribute Name: vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: inner-vlan-id
Attribute Type: uint16
Attribute Range: 1-4094
Attribute Name: monitor-action
Attribute Type: enum (log|sample)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<config>
<forwarding-action>deny</forwarding-action> <!-- operation="delete"-->
<protocol-name>ipipv6</protocol-name> <!-- operation="delete"-->
<source-address>any</source-address> <!-- operation="delete"-->
<destination-address>any</destination-address> <!-- operation="delete"-->
<dscp>default</dscp> <!-- operation="delete"-->
<flow-label>0</flow-label> <!-- operation="delete"-->
<vlan-id>1</vlan-id> <!-- operation="delete"-->
<inner-vlan-id>1</inner-vlan-id> <!-- operation="delete"-->
<monitor-action>log</monitor-action> <!-- operation="delete"-->
<redirect-interface-name>IFNAME</redirect-interface-name> <!-- operation="delete"-->
</config>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) (deny|permit) (ipipv6|ipv6ipv6|rsvp|gre|esp|ahp|ospf|pim|ipcomp|vrrp|any|<0-255>) (any) (any) (dscp (default|cs1|af11|af12|af13|cs2|af21|af22|af23|cs3|af31|af32|af33|cs4|af41|af42|af43|cs5|ef|cs6|cs7)|) (flow-label <0-1048575>|) (vlan <1-4094>|) (inner-vlan <1-4094>|) ((log|sample)|) (redirect-to-port IFNAME|)
Configure fragment monitor action
Use this attribute to enable logging or sampling of the packets on which the match occurred (in-direction only).
This command is supported when following feature are enabled CUSTOM1 ACL feature,IPV6 feature
Attribute Name: fragment-monitor-action
Attribute Type: enum (log|sample)
Attribute Name: fragment-forwarding-action
Attribute Type: enum (deny-all|permit-all)
Netconf edit-config payload
<acl xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-acl">
<acl-sets>
<acl-set>
<name>NAME</name>
<config>
<name>WORD</name>
<type>mac</type>
</config>
<type>mac</type>
<acl-entries>
<acl-entry>
<sequence-id>1</sequence-id>
<config>
<sequence-id>1</sequence-id>
</config>
<ipv6>
<fragment-actions>
<config>
<fragment-forwarding-action>deny-all</fragment-forwarding-action> <!-- operation="delete"-->
<fragment-monitor-action>log</fragment-monitor-action> <!-- operation="delete"-->
</config>
</fragment-actions>
</ipv6>
</acl-entry>
</acl-entries>
</acl-set>
</acl-sets>
</acl>
Command Syntax
(<1-268435453>|) fragments (deny-all|permit-all) ((log|sample)|)