Rule (For Ipv6 Acls) - H3C S3100 Series Command Manual

rule (for IPv6 ACLs)

Syntax
rule [ rule-id ] { deny | permit } [ dscp rule-string rule-mask ] [ ip-protocol rule-string rule-mask ]
[ src-ip ipv6-address prefix-length ] [ dest-ip ipv6-address prefix-length ] [ [ src-port rule-string
rule-mask | dest-port rule-string rule-mask ] * | [ icmpv6-type rule-string rule-mask | icmpv6-code
rule-string rule-mask ] * ] [ time-range time-name ]
undo rule rule-id
View
IPv6 ACL view
Parameter
rule-id: ACL rule ID, in the range of 0 to 65534.
deny: Drops the matched packets.
permit: Permits the matched packets.
dscp rule-string rule-mask: Specifies the traffic class information. Arguments rule-string and rule-mask
indicate the content string and mask and consist of two hexadecimal numbers respectively.
ip-protocol rule-string rule-mask: Specifies the next header information. Arguments rule-string and
rule-mask indicate the content string and mask and consist of two hexadecimal numbers respectively.
src-ip ipv6-address prefix-length: Specifies the source IPv6 address information. Arguments
ipv6-address and prefix-length indicate the IPv6 address and prefix length respectively, where
prefix-length must be in the range 1 to 128.
dest-ip ipv6-address prefix-length: Specifies the destination IPv6 address information. Arguments
ipv6-address and prefix-length indicate the IPv6 address and prefix length respectively, where
prefix-length must be in the range 1 to 128.
src-port rule-string rule-mask: Specifies the source TCP/UDP port information. Arguments rule-string
and rule-mask indicate the content string and mask and consist of four hexadecimal numbers
respectively.
dest-port rule-string rule-mask: Specifies the destination TCP/UDP port information. Arguments
rule-string and rule-mask indicate the content string and mask and consist of four hexadecimal numbers
respectively.
icmpv6-type rule-string rule-mask: Specifies the ICMPv6 message type information. Arguments
rule-string and rule-mask indicate the content string and mask and consist of two hexadecimal numbers
respectively.
icmpv6-code rule-string rule-mask: Specifies the ICMPv6 message code information. Arguments
rule-string and rule-mask indicate the content string and mask and consist of two hexadecimal numbers
respectively.
time-range time-name: Specifies the time range in which the rule takes effect. time-name indicates the
name of a time range and must be a case-insensitive string of 1 to 32 characters that starts with an
English letter. To avoid confusion, it cannot be all.
Description
Use the rule command to define an ACL rule.
1-22