Firewall Packet-Filter - HPE FlexNetwork HSR6800 Security Command Reference

undo firewall ipv6 enable
Default
The IPv6 firewall function is disabled.
Views
System view
Default command level
2: System level
Examples
# Enable the IPv6 firewall function.
<Sysname> system-view
[Sysname] firewall ipv6 enable

firewall packet-filter

Use firewall packet-filter to configure IPv4 packet filtering on the interface.
Use undo firewall packet-filter to cancel the configuration.
Syntax
firewall packet-filter { acl-number | name acl-name } { inbound | outbound }
undo firewall packet-filter { acl-number | name acl-name } { inbound | outbound }
Default
Packets are not filtered on an interface.
Views
Interface view
Default command level
2: System level
Parameters
acl-number: Specifies a basic ACL number in the range of 2000 to 2999 or an advanced ACL number
in the range of 3000 to 3999.
name acl-name: Specifies the name of a basic or advanced IPv4 ACL; a case-insensitive string of 1
to 63 characters that must start with an English letter a to z or A to Z. To avoid confusion, the word
"all" cannot be used as the ACL name.
inbound: Filters packets received by the interface.
outbound: Filters packets forwarded from the interface.
Usage guidelines
You can apply only one IPv4 ACL in one direction of an interface to filter packets.
Examples
# Apply ACL 2001 to interface GigabitEthernet 3/0/1 to filter outbound packets.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1] firewall packet-filter 2001 outbound
366