HP 6125G Configuration Manual page 14

Step Command
1. Enter system
system-view
view.
2. Create an IPv6
acl ipv6 number acl6-number
advanced ACL
[ name acl6-name ]
and enter its
[ match-order { auto | config } ]
view.
3. Configure a
description for
description text
the IPv6
advanced ACL.
4. Set the rule
numbering
step step-value
step.
rule [ rule-id ] { deny | permit }
protocol [ { { ack ack-value | fin
fin-value | psh psh-value | rst
rst-value | syn syn-value | urg
urg-value } * | established } |
counting | destination { dest
dest-prefix | dest/dest-prefix |
any } | destination-port
operator port1 [ port2 ] | dscp
5. Create or edit a
dscp | flow-label
rule.
flow-label-value | fragment |
icmp6-type { icmp6-type
icmp6-code | icmp6-message }
| routing [ type routing-type ] |
source { source source-prefix |
source/source-prefix | any } |
source-port operator port1
[ port2 ] | time-range
time-range-name | vpn-instance
vpn-instance-name ] *
6. Add or edit a
rule rule-id comment text
rule comment.
7. Add or edit a
rule range
rule [ rule-id ] remark text
remark.
8. Enable
counting ACL
rule matches
hardware-count enable
performed in
hardware.
Remarks
N/A
By default, no ACL exists.
IPv6 advanced ACLs are numbered in the range of
3000 to 3999.
You can use the acl ipv6 name acl6-name command
to enter the view of a named IPv6 ACL.
Optional.
By default, an IPv6 advanced ACL has no ACL
description.
Optional.
5 by default.
By default IPv6 advanced ACL does not contain any
rule.
If an IPv6 advanced ACL is for QoS traffic
classification or packet filtering:
•
Do not specify the fragment and routing
keywords, or specify neq for the operator
argument.
•
Do not specify the flow-label keyword if the ACL
is for outbound QoS traffic classification or
outbound packet filtering.
The counting keyword (even if specified) does not
take effect for QoS traffic classification.
Optional.
By default, no rule comments are configured.
Optional.
By default, no rule range remarks are configured.
Optional.
Disabled by default.
When the ACL is referenced by a QoS policy, this
command does not take effect.
8