Ipv6 Acl Configuration; Configuring A Basic Ipv6 Acl - HP 4800G Series Configuration Manual

3

IPv6 ACL Configuration

When configuring IPv6 ACLs, go to these sections for information you are interested in:
Creating a Time Range

Configuring a Basic IPv6 ACL

Configuring an Advanced IPv6 ACL
Copying an IPv6 ACL
Displaying and Maintaining IPv6 ACLs
IPv6 ACL Configuration Example
Creating a Time Range
Refer to Creating a Time
Configuring a Basic IPv6 ACL
Basic IPv6 ACLs match packets based on only source IPv6 address. They are numbered in the range
2000 to 2999.
Configuration Prerequisites
If you want to reference a time range in a rule, define it with the time-range command first.
Configuration Procedure
Follow these steps to configure an IPv6 ACL:
To do...
Enter system view
Create a basic IPv6
ACL view and enter its
view
Create or modify a rule
Set the rule numbering
step
Range.
Use the command...
system-view
acl ipv6 number
acl6-number [ name
acl6-name ] [ match-order
{ auto | config } ]
rule [ rule-id ] { deny |
permit } [ fragment |
logging | source
{ ipv6-address prefix-length |
ipv6-address/prefix-length |
any } | time-range
time-range-name ] *
step step-value
3-1
Remarks
––
Required
The default match order is config.
If you specify a name for an IPv6 ACL
when creating the ACL, you can use the
acl ipv6 name acl6-name command to
enter the view of the ACL later.
Required
To create or modify multiple rules, repeat
this step.
Note that the logging and fragment
keywords are not supported if the ACL is
to be referenced by a QoS policy for traffic
classification.
Optional
5 by default