Configuring An Ipv6 Advanced Acl - HP 5830 Series Configuration Manual

Step
3. Configure a
description for the
IPv4 advanced ACL.
4. Set the rule
numbering step.
5. Create or edit a rule.
6. Add or edit a rule
comment.
7. Add or edit a rule
range remark.
8. Enable counting ACL
rule matches
performed in
hardware.

Configuring an IPv6 advanced ACL

IPv6 advanced ACLs match packets based on the source IPv6 addresses, destination IPv6 addresses,
packet priorities, protocols carried over IPv6, and other protocol header fields such as the TCP/UDP
source port number, TCP/UDP destination port number, ICMPv6 message type, and ICMPv6 message
code.
Compared to IPv6 basic ACLs, IPv6 advanced ACLs allow more flexible and accurate filtering.
To configure an IPv6 advanced ACL:
Step
1. Enter system view.
Command
description text
step step-value
rule [ rule-id ] { deny | permit }
protocol [ { { ack ack-value | fin
fin-value | psh psh-value | rst
rst-value | syn syn-value | urg
urg-value } * | established } |
counting | destination
{ dest-address dest-wildcard |
any } | destination-port operator
port1 [ port2 ] | dscp dscp |
fragment | icmp-type { icmp-type
[ icmp-code ] | icmp-message } |
logging | precedence
precedence | source
{ source-address source-wildcard
| any } | source-port operator
port1 [ port2 ] | time-range
time-range-name | tos tos |
vpn-instance vpn-instance-name ]
*
rule rule-id comment text
rule [ rule-id ] remark text
hardware-count enable
Command
system-view
7
Remarks
Optional.
By default, an IPv4 advanced ACL has no
ACL description.
Optional.
The default setting is 5.
By default, an IPv4 advanced ACL does not
contain any rules.
If an IPv4 advanced ACL is for QoS traffic
classification or packet filtering:
•
Do not specify the vpn-instance keyword
or specify neq for the operator argument.
•
The logging and counting keywords
(even if specified) do not take effect for
QoS traffic classification.
Optional.
By default, no rule comments are
configured.
Optional.
By default, no rule range remarks are
configured.
Optional.
By default, this feature is disabled.
When the ACL is referenced by a QoS
policy, this command does not take effect.
Remarks
N/A