HP 6125G HP 6125G & 6125G/XG Blade Switches ACL and QoS Command Refere - Page 8

acl ipv6

Page 8 highlights

acl ipv6 Syntax acl ipv6 number acl6-number [ name acl6-name ] [ match-order { auto | config } ] View undo acl ipv6 { all | name acl6-name | number acl6-number } System view Default level 2: System level Parameters number acl6-number: Specifies the number of an IPv6 ACL: • 2000 to 2999 for IPv6 basic ACLs • 3000 to 3999 for IPv6 advanced ACLs name acl6-name: Assigns a name to the IPv6 ACL for easy identification. The acl6-name argument takes a case-insensitive string of 1 to 63 characters. It must start with an English letter, and to avoid confusion, cannot be all. match-order: Sets the order in which ACL rules are compared against packets: • auto-Compares ACL rules in depth-first order. The depth-first order differs with ACL categories. For more information, see ACL and QoS Configuration Guide. • config-Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has higher priority. If no match order is specified, the config order applies by default. all: Delete all IPv6 ACLs. Description Use acl ipv6 to create an IPv6 ACL and enter its ACL view. If the ACL has been created, you enter its view directly. Use undo acl ipv6 to delete the specified IPv6 ACL or all IPv6 ACLs. By default, no ACL exists. You can assign a name to an IPv6 ACL only when you create it. After an IPv6 ACL is created, you cannot rename it or remove its name. You can change match order only for ACLs that do not contain any rules. To display any ACLs you have created, use the display acl ipv6 command. Examples # Create IPv6 ACL 2000 and enter its view. system-view [Sysname] acl ipv6 number 2000 [Sysname-acl6-basic-2000] # Create IPv6 basic ACL 2001 with the name flow, and enter its view. system-view [Sysname] acl ipv6 number 2001 name flow [Sysname-acl6-basic-2001-flow] 3

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104

3
acl ipv6
Syntax
acl
ipv6 number
acl6-number
[
name
acl6-name
] [
match-order
{
auto
|
config
} ]
undo
acl
ipv6
{
all
|
name
acl6-name
|
number
acl6-number
}
View
System view
Default level
2: System level
Parameters
number
acl6-number
: Specifies the number of an IPv6 ACL:
2000 to 2999 for IPv6 basic ACLs
3000 to 3999 for IPv6 advanced ACLs
name
acl6-name
: Assigns a name to the IPv6 ACL for easy identification. The
acl6-name
argument takes
a case-insensitive string of 1 to 63 characters. It must start with an English letter, and to avoid confusion,
cannot be
all
.
match-order
: Sets the order in which ACL rules are compared against packets:
auto
—Compares ACL rules in depth-first order. The depth-first order differs with ACL categories. For
more information, see
ACL and QoS Configuration Guide
.
config
—Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has higher
priority. If no match order is specified, the config order applies by default.
all
: Delete all IPv6 ACLs.
Description
Use
acl ipv6
to create an IPv6 ACL and enter its ACL view. If the ACL has been created, you enter its view
directly.
Use
undo
acl ipv6
to delete the specified IPv6 ACL or all IPv6 ACLs.
By default, no ACL exists.
You can assign a name to an IPv6 ACL only when you create it. After an IPv6 ACL is created, you cannot
rename it or remove its name.
You can change match order only for ACLs that do not contain any rules.
To display any ACLs you have created, use the
display acl
ipv6
command.
Examples
# Create IPv6 ACL 2000 and enter its view.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000]
# Create IPv6 basic ACL 2001 with the name
flow
, and enter its view.
<Sysname> system-view
[Sysname] acl ipv6 number 2001 name flow
[Sysname-acl6-basic-2001-flow]