Developer Documentation
ADC CLI Commands
Current Release 13.1 13.0 12.1

ns-simpleacl6

May 28, 2024
Contributed by: 
C

The following operations can be performed on “ns-simpleacl6”:

clear stat rm flush show add

clear ns simpleacl6

Removes all simple ACL6 rules from the Citrix ADC.

Synopsis

clear ns simpleacl6

Example

clear ns simpleacl6

stat ns simpleacl6

Displays statistics related to the simple ACL6 rules.

Synopsis

stat ns simpleacl6 [-detail] [-fullValues] [-ntimes ] [-logFile ] [-clearstats ( basic full )]

Arguments

detail Specifies detailed output (including more statistics). The output can be quite voluminous. Without this argument, the output will show only a summary.

fullValues Specifies that numbers and strings should be displayed in their full form. Without this option, long strings are shortened and large numbers are abbreviated

ntimes The number of times, in intervals of seven seconds, the statistics should be displayed. Default value: 1 Minimum value: 0

logFile The name of the log file to be used as input.

clearstats Clear the statsistics / counters

Possible values: basic, full

Output

Counters

SimpleACL6 hits (SACL6Hits) Packets matching a SimpleACL6.

SimpleACL6 misses (SACL6Miss) Packets not matching any SimpleACL6.

SimpleACLs6 count (SACL6sCount) Number of SimpleACL6s configured.

Allow SimpleACL6 hits (SACL6Allow) Total packets that matched a SimpleACL6 with action ALLOW and got consumed by Citrix ADC.

Bridge SimpleACL6 hits (SACL6Bdg) Total packets that matched a SimpleACL6 with action BRIDGE and got bridged by Citrix ADC.

Deny SimpleACL6 hits (SACL6Deny) Packets dropped because they match SimpleACL6 with processing mode set to DENY.

Example

stat simpleacl6

rm ns simpleacl6

Removes a simple ACL6 rule from the Citrix ADC.

Synopsis

rm ns simpleacl6 ...

Arguments

aclname Name of the simple ACL6 rule that you want to remove.

Example

rm ns simpleacl6 rule1

flush ns simpleacl6

Terminates all established IPv6 connections that match any of the newly configured simple ACL6 rules.

Note: If you plan to create more than one simple ACL6 rule and flush existing connections that match any of them, you can minimize the affect on performance by first creating all of the simple ACL6 rules and then running flush only once.

Synopsis

flush ns simpleacl6 -estSessions

Arguments

estSessions

show ns simpleacl6

Displays settings of all the simple ACL6 rules or of the specified simple ACL6 rule. To display settings of all the simple ACL6 rules, run the command without any parameters. To display settings of a particular simple ACL6 rule, specify the name of the simple ACL6 rule.

Synopsis

show ns simpleacl6 []

Arguments

aclname Name of the simple ACL6 rule whose settings you want the Citrix ADC to display.

Output

aclaction Action associated with the SACL6 rule.

td Integer value that uniquely identifies the traffic domain in which you want to configure the entity. If you do not specify an ID, the entity becomes part of the default traffic domain, which has an ID of 0.

srcIPv6 Source IP6 address.

stateflag SACL6 state flag.

destPort Destination Port.

protocol Protocol associated with the ACL rule.

TTL Time to expire this ACL rule(in seconds).

hits Number of hits for this SACL6 rule.

time Time when this acl is added.

devno count

Example

show simpleacl6 rule1 Name: rule1 Action: DENY Hits: 5 srcIP6 = 3ffe:100:100::1 Protocol = TCP DestPort = 110 TTL: 200(seconds)

add ns simpleacl6

Adds a simple ACL6 rule to the Citrix ADC. Simple ACL6 rules filter IPv6 packets on the basis of their source IP addresses and, optionally, the destination port and/or protocol. Any packet with the characteristics specified in the simple ACL6 rule is dropped.

Synopsis

add ns simpleacl6 \[-td <positive\_integer>] -srcIPv6 <ipv6\_addr|null> \[-destPort -protocol \( TCP | UDP )] \[-TTL <positive\_integer>]

Arguments

aclname Name for the simple ACL6 rule. Must begin with an ASCII alphabetic or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters. Cannot be changed after the simple ACL6 rule is created.

td Integer value that uniquely identifies the traffic domain in which you want to configure the entity. If you do not specify an ID, the entity becomes part of the default traffic domain, which has an ID of 0. Minimum value: 0 Maximum value: 4094

aclaction Drop incoming IPv6 packets that match the simple ACL6 rule.

Possible values: DENY

srcIPv6 IP address to match against the source IP address of an incoming IPv6 packet.

destPort Port number to match against the destination port number of an incoming IPv6 packet.

DestPort is mandatory while setting Protocol. Omitting the port number and protocol creates an all-ports and all protocol simple ACL6 rule, which matches any port and any protocol. In that case, you cannot create another simple ACL6 rule specifying a specific port and the same source IPv6 address. Minimum value: 1 Maximum value: 65535

protocol Protocol to match against the protocol of an incoming IPv6 packet. You must set this parameter if you set the Destination Port parameter.

Possible values: TCP, UDP

TTL Number of seconds, in multiples of four, after which the simple ACL6 rule expires. If you do not want the simple ACL6 rule to expire, do not specify a TTL value. Minimum value: 4 Maximum value: 2147483647

Example

add simpleacl6 rule1 DENY -srcIP6 fe80::2c0:95ff:fec5:d9b8 -destPort 80 -protocol TCP add simpleacl rule2 DENY -srcIP6 3ffe:100:100::1 -TTL 600

ns-simpleacl6
May 28, 2024
Contributed by: 
C
May 28, 2024
Contributed by: 
C

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.