3Com 4500 PWR 26-Port Configuration Manual page 526

Whe n configuring IPv6 ACL rules, note that:
To specify the src-port or dest-port keyword for a ru
rule-string rule-mask
icmpv6-type or icmpv
rule-mask combination as ICMPv6, that is,
The total length of the fields in a rul
configuration will fail. For
bytes each and 3
Configuration prerequisites
To configure time range-based
first. For information about tim
The settings to be specified in
Configuration procedure
F ollow these steps to
Operation
Enter system view
Create an IPv6 ACL and enter
IPv6 ACL view
Define an ACL rule
Assign a description string to
the ACL rule
As sign a description string to
the ACL
Note that:
combination as TCP or UDP, that is, 0x06 or 0x11. To specify the
6-code keyword for a rule, you need to specify the ip-protocol rule-string
example, if you define the src-ip and dest-ip fields in rule 1, which are 16
2 bytes in total, you can define no more fields f
IPv6 ACL rules, you need
e range configuration, refer to se
the rule are determined.
define an IPv 6 ACL rule:
system-view
acl number acl-number
rule [ rule-id ] { deny | permit
[ cos rule-stri
[ dest-ip ipv6
prefix-length ] [ dest-mac
rule-string rule-mask ]
[ double-tag ] [ dscp rule-string
rule-mask ] [ ip-pro
rule-string rule-mask
[ ipv6-type ] [ src-ip
ipv6-address prefix-length ]
[ src-mac rule-string
rule-mask ] [ vlan rule-string
rule-mask ] [ [ src-port
rule-string rule-mask |
dest-port rule-string
rule-mask ] * | [ icmpv6-type
rule-string rule-mask |
icmpv6-code rule-string
rule-mask ] * ] [ time-range
time-name ]
rule rule-id comment text
description text
le, you need to specify the ip-protocol
0x3a.
e cannot be more than 32 byt
to crea
c
Command
}
ng rule-mask ]
-address
tocol
]
44-11
es; otherwise
or th e rule.
te the corr esponding time ranges
tion Configuring Time Rang
Description
—
Requir ed
Required
To specify the src-port or
dest-port keyword in the
command, you need to spe
the ip-protocol rule-string
rule-mask combination as TCP
or UDP, that is, 0x06 or 0x11.
To specify the icmpv6-type or
icmpv6-code keyword, you
need to specify the ip-protocol
rule-string rule-mask
combination as ICMPv6, that is,
0x3a.
Optional
No description by default
Optional
No description by default
, the rule
e .
cify