H3C S5500-SI Series Operation Manual page 791

To do...
view
Apply a basic or advanced IPv4
ACL to the interface to filter
IPv4 packets
Filtering IPv6 Packets
Follow these steps to apply an IPv6 ACL to an interface to filter IPv6 packets:
To do...
Enter system view
Enter
interface
view
Apply a basic or advanced IPv6
ACL to the interface to filter
IPv6 packets
Configuring Packet Filtering Statistics Function
The S5500-SI series provides the packet filtering statistics function so that the device can output packet
filtering statistics information at a specified interval. With the output, you are able to know how many
packets are filtered by which ACL rules.
The packet filtering statistics function takes effect for only rules with the logging keyword specified.
The packet filtering statistics are managed and output as device log information by the information
center.
The packet filtering statistics are of the severity level of 6, that is, informational. Informational
messages are not output to the console by default; therefore, you need to modify the log
information output rule for the informational message output to be sent to the console or other
destinations.
For introduction and configuration of the information center, refer to Information Center
Configuration in the System Volume.
Enter VLAN interface vlan-interface
interface view vlan-id
packet-filter { acl-number |
name acl-name } inbound
system-view
Enter Ethernet
interface interface-type
interface view interface-number
Enter VLAN interface vlan-interface
interface view vlan-id
packet-filter ipv6
{ acl6-number | name
acl6-name } inbound
Use the command...
Use the command...
4-2
Remarks
Required
By default, an interface does
not filter IPv4 packets.
Remarks
—
Use either command
Required
By default, no IPv6 ACL is
applied to the interface.