HP 6125XLG R2306-HP 6125XLG Blade Switch ACL and QoS Command Reference - Page 31

Table 12, Match criteria and other rule information for IPv6 advanced ACL rules, Specifies a DSCP

Page 31 highlights

Table 12 Match criteria and other rule information for IPv6 advanced ACL rules Parameters Function Description source { source-address source-prefix | source-address/so urce-prefix | any } Specifies a source IPv6 address. The source-address and source-prefix arguments represent an IPv6 source address, and prefix length in the range of 1 to 128. The any keyword represents any IPv6 source address. destination { dest-address dest-prefix | dest-address/destprefix | any } Specifies a destination IPv6 address. The dest-address and dest-prefix arguments represent a destination IPv6 address, and prefix length in the range of 1 to 128. The any keyword specifies any IPv6 destination address. counting Counts the number of times the IPv6 advanced ACL rule has been matched. The counting keyword enables match counting specific to rules, and the hardware-count keyword in the packet-filter ipv6 command enables match counting for all rules in an ACL. If the counting keyword is not specified, matches for the rule are not counted. dscp dscp Specifies a DSCP preference. The dscp argument can be a number in the range of 0 to 63, or in words: af11 (10), af12 (12), af13 (14), af21 (18), af22 (20), af23 (22), af31 (26), af32 (28), af33 (30), af41 (34), af42 (36), af43 (38), cs1 (8), cs2 (16), cs3 (24), cs4 (32), cs5 (40), cs6 (48), cs7 (56), default (0), or ef (46). flow-label flow-label-value Specifies a flow label value The flow-label-value argument is in the range of 0 to in an IPv6 packet header. 1048575. fragment Applies the rule to only non-first fragments. Without this keyword, the rule applies to all fragments and non-fragments. logging Logs matching packets. This function requires that the module (for example, packet filtering) that uses the ACL supports logging. routing [ type routing-type ] Specifies routing header types. routing-type: Value of the routing header type, which is in the range of 0 to 255. If you specify the type routing-type option, the rule applies to the specified type of routing header. Otherwise, the rule applies to any type of routing header. hop-by-hop [ type Specifies Hop-by-Hop hop-type ] Options header types. hop-type: Value of the Hop-by-Hop Options header type, in the range of 0 to 255. If you specify the type hop-type option, the rule applies to the specified type of Hop-by-Hop Options header. Otherwise, the rule applies to any type of Hop-by-Hop Options header. time-range time-range-name Specifies a time range for the rule. The time-range-name argument is a case-insensitive string of 1 to 32 characters. It must start with an English letter. If the time range is not configured, the system creates the rule. However, the rule using the time range can take effect only after you configure the timer range. For more information about time range, see ACL and QoS Configuration Guide. 26

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114

26
Table 12
Match criteria and other rule information for IPv6 advanced ACL rules
Parameters
Function
Description
source
{
source-address
source-prefix
|
source-address/so
urce-prefix
|
any
}
Specifies a source IPv6
address.
The
source-address
and
source-prefix
arguments represent
an IPv6 source address, and prefix length in the range of 1
to 128.
The
any
keyword represents any IPv6 source address.
destination
{
dest-address
dest-prefix
|
dest-address/dest-
prefix
|
any
}
Specifies a destination IPv6
address.
The
dest-address
and
dest
-
prefix
arguments represent a
destination IPv6 address, and prefix length in the range of
1 to 128.
The
any
keyword specifies any IPv6 destination address.
counting
Counts the number of times
the IPv6 advanced ACL rule
has been matched.
The
counting
keyword enables match counting specific to
rules, and the
hardware-count
keyword in the
packet-filter
ipv6
command enables match counting for all rules in an
ACL. If the
counting
keyword is not specified, matches for
the rule are not counted.
dscp
dscp
Specifies a DSCP
preference.
The
dscp
argument can be a number in the range of 0 to
63, or in words:
af11
(10),
af12
(12),
af13
(14),
af21
(18),
af22
(20),
af23
(22),
af31
(26),
af32
(28),
af33
(30),
af41
(34),
af42
(36),
af43
(38),
cs1
(8),
cs2
(16),
cs3
(24),
cs4
(32),
cs5
(40),
cs6
(48),
cs7
(56),
default
(0), or
ef
(46).
flow-label
flow-label-value
Specifies a flow label value
in an IPv6 packet header.
The
flow-label-value
argument is in the range of 0 to
1048575.
fragment
Applies the rule to only
non-first fragments.
Without this keyword, the rule applies to all fragments and
non-fragments.
logging
Logs matching packets.
This function requires that the module (for example, packet
filtering) that uses the ACL supports logging.
routing
[
type
routing-type
]
Specifies routing header
types.
routing-type
: Value of the routing header type, which is in
the range of 0 to 255.
If you specify the
type
routing-type
option, the rule applies
to the specified type of routing header. Otherwise, the rule
applies to any type of routing header.
hop-by-hop
[
type
hop-type
]
Specifies Hop-by-Hop
Options header types.
hop-type
: Value of the Hop-by-Hop Options header type,
in the range of 0 to 255.
If you specify the
type
hop-type
option, the rule applies to
the specified type of Hop-by-Hop Options header.
Otherwise, the rule applies to any type of Hop-by-Hop
Options header.
time-range
time-range-name
Specifies a time range for
the rule.
The
time-range-name
argument is a case-insensitive string
of 1 to 32 characters. It must start with an English letter. If
the time range is not configured, the system creates the
rule. However, the rule using the time range can take effect
only after you configure the timer range.
For more information about time range, see
ACL and QoS
Configuration Guide
.