Packet-Filter (Interface View) - HPE FlexNetwork HSR6800 series Command Reference Manual

Field
IPv6 default action

packet-filter (interface view)

Use packet-filter to apply an ACL to an interface to filter packets.
Use undo packet-filter to remove an ACL from an interface.
Syntax
packet-filter [ ipv6 ] { acl-number | name acl-name } { inbound | outbound } [ hardware-count ]
undo packet-filter [ ipv6 ] { acl-number | name acl-name } { inbound | outbound }
Default
No ACL is applied to an interface to filter packets.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6: Specifies the IPv6 ACL type.
acl-number: Specifies an ACL by its number. The following are available value ranges:
•
2000 to 2999 for basic ACLs.
•
3000 to 3999 for advanced ACLs.
name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string
of 1 to 63 characters.
inbound: Filters incoming packets.
outbound: Filters outgoing packets.
hardware-count: Enables counting ACL rule matches performed in hardware. If you do not specify
this keyword, rule matches for the ACL are not counted.
Usage guidelines
To specify the IPv4 ACL type, do not specify the ipv6 keyword.
The hardware-count keyword in this command enables match counting for all rules in an ACL, and
the counting keyword in the rule command enables match counting specific to rules.
Description
Packet filter default action for packets that do not match any
IPv6 ACLs:
•
Deny—The default action deny has been successfully
applied for packet filtering.
•
Deny (Failed)—The device has failed to apply the default
action deny for packet filtering. The action permit still
functions.
•
Permit—The default action permit has been successfully
applied for packet filtering.
•
Hardware-count—The hardware-count feature has
been successfully applied for the default action for packet
filtering.
•
Hardware-count (Failed)—The device has failed to
apply the hardware-count feature for the packet filtering
default action.
15