Configuring A Basic Acl6; Configuring An Advanced Acl6 - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l
l
l
The time range test includes 8:00-18:00 on Monday to Friday and 14:00-18:00 on Saturday and
Sunday in the year 2009.
----End
Postrequisite
When a time range is specified for the ACL6, the ACL6 takes effect only in this time range. If
no time range is specified for the ACL6, the ACL6 is always effective until it is deleted or the
rules of the ACL6 are deleted.

11.4.4 Configuring a Basic ACL6

Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
acl ipv6 [ number ] acl6-number [ match-order { auto | config } ]
An ACL6 is created.
The acl6-number value of a basic ACL6 ranges from 2000 to 2999.
match-order indicates the match order of ACL6 rules.
l
l
If match-order is not used, the match order is config.
Step 3 Run:
rule [ rule-id ] { deny | permit } [ fragment | source { source-ipv6-address prefix-
length | source-ipv6-address/prefix-length | any } | time-range time-name ]
The rule of the ACL6 is configured.
----End

11.4.5 Configuring an Advanced ACL6

Procedure
Step 1 Run:
system-view
The system view is displayed.
Issue 06 (2010–01–08)
Time range 1: 2009-01-01 00:00 to 2009-12-31 23:59
Time range 2: 8:00-18:00 on Monday to Friday
Time range 3: 14:00-18:00 on Saturday and Sunday
auto indicates that the ACL rules are matched on the basis of depth first principle.
config: indicates that the rules are matched on the basis of the configuration order.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
11 ACL Configuration
*
11-11