This read-create enumerated value specifies whether the switch should permit or deny an IPv6 packet that matches this access control list entry. An admin configures this as the core decision of the ACL rule -- pairing it with the match criteria elsewhere in the entry to either allow or block matching traffic. For example, setting this to deny(0) on an entry matching a specific source address would drop packets from that source.