HP E4510-48G Command Reference Manual page 846

Parameters
rule-id: IPv6 ACL rule number, in the range 0 to 65534.
deny: Drops matched packets.
permit: Allows matched packets to pass.
protocol: Protocol carried over IPv6. It can be a number in the range 0 to 255, or in words, gre (47),
icmpv6 (58), ipv6, ipv6-ah (51), ipv6-esp (50), ospf (89), tcp (6), or udp (17).
parameters that can be specified after the protocol argument.
Table 14-9 Match criteria and other rule information for advanced IPv6 ACL rules
Parameters
source { source
source-prefix |
source/source-prefix |
any }
destination { dest
dest-prefix |
dest/dest-prefix |
any }
dscp dscp
logging
fragment
time-range
time-range-name
Setting the protocol argument to tcp or udp, you may define the parameters shown in
Function
Specifies a source IPv6
address.
Specifies a destination IPv6
address.
Specifies a DSCP
preference
Specifies to log matched
packets
Indicates that the rule
applies to only non-first
fragments.
Specifies the time range in
which the rule takes effect.
14-27
Description
The source and source-prefix arguments
specify an IPv6 source address and its
prefix length in the range 1 to 128.
The any keyword indicates any IPv6
source address.
The dest and dest-prefix arguments
specify a destination IPv6 address, and its
prefix length in the range 1 to 128.
The any keyword indicates any IPv6
destination address.
The dscp argument can be a number in the
range 0 to 63, or in words, af11 (10), af12
(12), af13 (14), af21 (18), af22 (20), af23
(22), af31 (26), af32 (28), af33 (30), af41
(34), af42 (36), af43 (38), cs1 (8), cs2
(16), cs3 (24), cs4 (32), cs5 (40), cs6
(48), cs7 (56), default (0), or ef (46).
This function requires that the module
using the ACL support logging.
Without this keyword, the rule applies to all
fragments and non-fragments.
The time-range-name argument is a case
insensitive string of 1 to 32 characters. It
must start with an English letter and
cannot be the English word of all to avoid
confusion.
Table 14-9 shows the
Table 14-10.