HP 6125XLG R2306-HP 6125XLG Blade Switch ACL and QoS Command Reference - Page 36

rule comment, Usage guidelines, Examples, Related commands, Syntax, Default, Views

Get HP 6125XLG PDF manuals and user guides View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals

Page 36 highlights

Usage guidelines When an IPv6 basic ACL is for QoS traffic classification or packet filtering, do not specify the vpn-instance or fragment keyword. If the ACL is for outbound QoS traffic classification or packet filtering, do not specify the routing keyword. Within an ACL, the permit or deny statement of each rule must be unique. If the ACL rule you are creating or editing has the same deny or permit statement as another rule in the ACL, your creation or editing attempt fails. You can edit ACL rules only when the match order is config. If no optional keywords are provided in the undo rule command, you delete the entire rule. If optional keywords or arguments are provided, you delete the specified attributes. To view rules in an ACL and their rule IDs, use the display acl ipv6 all command. Examples # Create an IPv6 basic ACL rule to deny the packets from any source IP segment but 1001::/16, 3124:1123::/32, or FE80:5060:1001::/48. system-view [Sysname] acl ipv6 number 2000 [Sysname-acl6-basic-2000] rule permit source 1001:: 16 [Sysname-acl6-basic-2000] rule permit source 3124:1123:: 32 [Sysname-acl6-basic-2000] rule permit source fe80:5060:1001:: 48 [Sysname-acl6-basic-2000] rule deny source any Related commands • acl • acl logging interval • display acl • step • time-range rule comment Use rule comment to add a comment about an existing ACL rule or edit its comment to make the rule easy to understand. Use undo rule comment to delete an ACL rule comment. Syntax rule rule-id comment text undo rule rule-id comment Default An ACL has not rule comment. Views IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view Predefined user roles network-admin 31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
31
Usage guidelines
When an IPv6 basic ACL is for QoS traffic classification or packet filtering, do not specify the
vpn-instance
or
fragment
keyword. If the ACL is for outbound QoS traffic classification or packet filtering,
do not specify the
routing
keyword.
Within an ACL, the permit or deny statement of each rule must be unique. If the ACL rule you are creating
or editing has the same deny or permit statement as another rule in the ACL, your creation or editing
attempt fails.
You can edit ACL rules only when the match order is config.
If no optional keywords are provided in the
undo
rule
command, you delete the entire rule. If optional
keywords or arguments are provided, you delete the specified attributes.
To view rules in an ACL and their rule IDs, use the
display acl ipv6 all
command.
Examples
# Create an IPv6 basic ACL rule to deny the packets from any source IP segment but 1001::/16,
3124:1123::/32, or FE80:5060:1001::/48.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule permit source 1001:: 16
[Sysname-acl6-basic-2000] rule permit source 3124:1123:: 32
[Sysname-acl6-basic-2000] rule permit source fe80:5060:1001:: 48
[Sysname-acl6-basic-2000] rule deny source any
Related commands
•
acl
•
acl logging interval
•
display
acl
•
step
•
time-range
rule comment
Use
rule comment
to add a comment about an existing ACL rule or edit its comment to make the rule easy
to understand.
Use
undo rule comment
to delete an ACL rule comment.
Syntax
rule
rule-id
comment
text
undo
rule
rule-id
comment
Default
An ACL has not rule comment.
Views
IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view
Predefined user roles
network-admin