Configuring An Ipv6 Advanced Acl - HP A6600 Configuration Manual

Configuring an IPv6 advanced ACL

IPv6 advanced ACLs match packets based on the source IPv6 address, destination IPv6 address, protocol
carried over IPv6, and other protocol header fields such as the TCP/UDP source port number, TCP/UDP
destination port number, ICMP message type, and ICMP message code.
Compared to IPv6 basic ACLs, IPv6 advanced ACLs allow more flexible and accurate filtering.
To do...
1. Enter system view.
2. Create an IPv6 advanced
ACL and enter its view.
3. Configure a description for
the IPv6 advanced ACL.
4. Set the rule numbering
step.
5. Create or edit a rule.
6. Configure or edit a rule
description.
Command...
system-view
acl ipv6 number acl6-number [ name
acl6-name ] [ match-order { auto |
config } ]
description text
step step-value
rule [ rule-id ] { deny | permit } protocol
[ { { ack ack-value | fin fin-value | psh
psh-value | rst rst-value | syn syn-value |
urg urg-value } * | established } |
counting | destination { dest dest-prefix |
dest/dest-prefix | any } | destination-
port operator port1 [ port2 ] | dscp dscp
| flow-label flow-label-value | fragment
| icmp6-type { icmp6-type icmp6-code |
icmp6-message } | logging | source
{ source source-prefix |
source/source-prefix | any } | source-
port operator port1 [ port2 ] | time-
range time-range-name ] *
rule rule-id comment text
8
Remarks
––
Required.
By default, no ACL exists.
IPv6 advanced ACLs are
numbered in the range 3000 to
3999.
Use acl ipv6 name acl6-name to
enter the view of a named IPv6
ACL.
Optional.
By default, an IPv6 advanced
ACL has no ACL description.
Optional.
5 by default.
Required.
By default IPv6 advanced ACL
does not contain any rule.
To create or edit multiple rules,
repeat this step.
The logging keyword takes effect
only when the module (for
example, a firewall) using the
ACL supports logging.
Optional.
By default, an IPv6 advanced
ACL rule has no rule description.