Rule (In Simple Ipv6 Acl View) - H3C MSR 20-20 Command Reference Manual

2112 C 139: IP 6 ACL C
HAPTER V
Description
Example

rule (in simple IPv6 ACL view)

Syntax
C
ONFIGURATION OMMANDS
Table 554 Available ICMPv6 messages
ICMPv6 message
neighbor-advertisement
neighbor-solicitation
network-unreachable
packet-too-big
port-unreachable
router-advertisement
router-solicitation
unknown-ipv6-opt
unknown-next-hdr
Use the command to create an IPv6 ACL rule or modify the rule if it has
rule
existed.
Use the command to remove an IPv6 ACL rule or parameters from the
undo rule
rule.
With the undo rule command, if no parameters are specified, the entire ACL rule
is removed; if other parameters are specified, only the involved information is
removed.
You will fail to create or modify a rule if its permit/deny statement is exactly the
same as another rule. In addition, if the ACL match order is set to auto rather than
config, you cannot modify ACL rules.
When defining ACL rules, you need not assign them IDs. The system can
automatically assign rule IDs, starting with 0 and increasing in certain rule
numbering steps. A rule ID thus assigned is greater than the current highest rule
ID. For example, if the rule numbering step is 5 and the current highest rule ID is
28, the next rule will be numbered 30. For detailed information about step, refer
to "step (for IPv4)" on page 2100 and "step (for IPv6)" on page 2116.
You may use the display acl ipv6 command to verify rules configured in an IPv6
ACL. If the match order for this IPv6 ACL is auto, rules are displayed in the
depth-first match order rather than by rule number.
# Create a rule in IPv6 ACL 3000 to permit the TCP packets with the source
address 2030:5060::9050/64 to pass.
<Sysname> system-view
[Sysname] acl ipv6 number 3000
[Sysname-acl6-adv-3000] rule permit tcp source 2030:5060::9050/64
rule protocol [ addr-flag addr-flag | destination { dest dest-prefix | dest/dest-prefix |
any } | destination-port operator port1 [ port2 ] | dscp dscp | frag-type { fragment |
fragment-subseq | non-fragment | non-subseq } | icmpv6-type { icmpv6-type
icmpv6-code | icmpv6-message } | source { source source-prefix | source/source-prefix |
Type
136
135
1
2
1
134
133
4
4
Code
0
0
0
0
4
0
0
2
1