Configuring An Ipv6 Acl - H3C S3100 Series Operation Manual

Operation Manual (For Soliton) – ACL
H3C S3100 Series Ethernet Switches
<Sysname> system-view
[Sysname] acl number 4000
[Sysname-acl-ethernetframe-4000] rule deny cos 3 source 000d-88f5-97ed
ffff-ffff-ffff dest 0011-4301-991e ffff-ffff-ffff
# Display the configuration information of ACL 4000.
[Sysname-acl-ethernetframe-4000] display acl 4000
Ethernet frame ACL
Acl's step is 1
rule 0 deny cos excellent-effort source 000d-88f5-97ed ffff-ffff-ffff dest
0011-4301-991e ffff-ffff-ffff

1.2.5 Configuring an IPv6 ACL

You can match IPv6 packets by IPv6 ACLs to process IPv6 data flows as required.
S3100 Series Ethernet switches support matching the following fields:
dscp: Matches the traffic class field in IPv6 packets.
ip-protocol: Matches the next header field in IPv6 packets.
src-ip: Matches the source address field in IPv6 packets.
dest-ip: Matches the destination address field in IPv6 packets.
src-port: Matches the TCP/UDP source port field in IPv6 packets.
dest-port: Matches the TCP/UDP destination port field in IPv6 packets.
icmpv6-type: Matches the ICMPv6 type field in IPv6 packets.
icmpv6-code: Matches the ICMPv6 code field in IPv6 packets.
Note:
For information about the IPv6 packet format, refer to IPv6 Management Operation.
Before applying an IPv6 ACL, be sure to configure an IPv6 ACL template to specify the
fields to be matched. Also make sure that the contents of the IPv6 ACL are a subset of
the contents of the template. Otherwise, you cannot apply the IPv6 ACL to the
hardware.
I. Configuration prerequisites
To configure time range-based IPv6 ACL rules, you need to create the
corresponding time ranges first. For information about time range configuration,
refer to section
The settings to be specified in the rule are determined.
4000, 1 rule
1.2.1 Configuring Time
1-10
Chapter 1 ACL Configuration
Range.