H3C S6812 Series Command Reference Manual page 1543

ICMPv6 message name
neighbor-advertisement
neighbor-solicitation
network-unreachable
packet-too-big
port-unreachable
redirect
router-advertisement
router-solicitation
unknown-ipv6-opt
unknown-next-hdr
Usage guidelines
If an IPv6 advanced ACL is used for outbound QoS traffic classification or packet filtering, do not
specify the flow-label parameter.
If an IPv6 advanced ACL is used for packet filtering, do not specify the fragment keyword.
Within an ACL, the permit or deny statement of each rule must be unique. If the rule you are creating
or editing has the same deny or permit statement as another rule in the ACL, the rule will not be
created or changed.
You can edit ACL rules only when the match order is config.
To view the existing IPv6 basic and advanced ACL rules, use the display acl ipv6 all command.
The rule ID is required in the undo rule rule-id command.
If you do not specify optional parameters, the undo rule rule-id command deletes the entire rule. If
you specify optional parameters, the undo rule rule-id command deletes the specified attributes.
The undo rule { deny | permit } command can only be used to delete the entire rule. You must
specify all the attributes of the rule for the command.
Examples
# Create an IPv6 advanced ACL rule to permit TCP packets with the destination port 80 from
2030:5060::/64 to FE80:5060::/96.
<Sysname> system-view
[Sysname] acl ipv6 advanced 3000
[Sysname-acl-ipv6-adv-3000] rule permit tcp source 2030:5060::/64 destination
fe80:5060::/96 destination-port eq 80
# Create IPv6 advanced ACL rules to permit all IPv6 packets but the ICMPv6 packets destined for
FE80:5060:1001::/48.
<Sysname> system-view
[Sysname] acl ipv6 advanced 3001
[Sysname-acl-ipv6-adv-3001] rule deny icmpv6 destination fe80:5060:1001:: 48
[Sysname-acl-ipv6-adv-3001] rule permit ipv6
# Create IPv6 advanced ACL rules to permit inbound and outbound FTP packets.
<Sysname> system-view
[Sysname] acl ipv6 advanced 3002
[Sysname-acl-ipv6-adv-3002] rule permit tcp source-port eq ftp
ICMPv6 message type
136
135
1
2
1
137
134
133
4
4
28
ICMPv6 message code
0
0
0
0
4
0
0
0
2
1