H3C S7500E Series Command Manual page 1103

Command Manual – ACL
H3C S7500E Series Ethernet Switches
Description
Use the acl ipv6 command to enter IPv6 ACL view. If the ACL does not exist, it is
created first.
Use the undo acl ipv6 command to remove a specified or all IPv6 ACLs.
By default, the match order is config.
Note that:
The match order setting is not available for simple IPv6 ACLs, because a simple
IPv6 ACL can contain only one rule.
You can specify a name for an IPv6 ACL only when you create the ACL. After
creating an ACL, you cannot specify a name for it, nor can you change or remove
the name of the ACL.
The name of an IPv6 ACL must be unique among IPv6 ACLs. However, an IPv4
ACL and an IPv6 ACL can share the same name.
If you specify both an ACL number and an ACL name in one command to enter the
view of an existing ACL, be sure that the ACL number and ACL name identify the
same ACL.
You can also use this command to modify the match order of an existing IPv6 ACL
but only when it is empty.
Examples
# Create IPv6 ACL 2000.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000]
# Create IPv6 ACL 2002, giving the ACL a name of flow.
<Sysname> system-view
[Sysname] acl ipv6 number 2002 name flow
[Sysname-acl6-basic-2002-flow]
# Enter the view of an IPv6 ACL that has no name by specifying its number.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000]
# Enter the view of an IPv6 ACL that has a name by specifying its number.
<Sysname> system-view
[Sysname] acl ipv6 number 2002
[Sysname-acl6-basic-2002-flow]
# Delete the IPv6 ACL with the number of 2000.
<Sysname> system-view
[Sysname] undo acl ipv6 number 2000
Chapter 1 ACL Configuration Commands
1-23