Rule (In Basic Ipv6 Acl View) - H3C S7500E Series Command Manual

Hide thumbs Also See for S7500E Series:

Table of Contents

Command Manual – ACL

H3C S7500E Series Ethernet Switches

# Clear statistics about IPv6 ACL 2001, which is referenced by upper layer software.

<Sysname> reset acl ipv6 counter 2001

# Clear statistics about the IPv6 ACL named flow, which is referenced by upper layer

<Sysname> reset acl ipv6 counter name flow

1.3.7 rule (in basic IPv6 ACL view)

rule [ rule-id ] { deny | permit } [ fragment | logging | source { ipv6-address

prefix-length | ipv6-address/prefix-length | any } | time-range time-name ] *

undo rule rule-id [ fragment | logging | source | time-range ] *

Basic IPv6 ACL view

rule-id: IPv6 ACL rule number in the range 0 to 65534.

deny: Defines a deny statement to drop matched packets.

permit: Defines a permit statement to allow matched packets to pass.

fragment: Specifies that the rule applies to only IP fragments.

logging: Specifies to log matched packets.

source { ipv6-address prefix-length | ipv6-address/prefix-length | any }: Specifies a

source address. The ipv6-address and prefix-length arguments specify a source IPv6

address, and its address prefix length in the range 1 to 128. The any keyword indicates

any IPv6 source address.

time-range time-name: Specifies the time range in which the rule takes effect. The

time-name argument specifies a time range name with 1 to 32 characters. It is case

insensitive and must start with an English letter. To avoid confusion, this name cannot

Use the rule command to create an IPv6 ACL rule or modify the rule if it has existed.

Use the undo rule command to remove an IPv6 ACL rule or parameters from the rule.

With the undo rule command, if no parameters are specified, the entire ACL rule is

removed; if other parameters are specified, only the involved information is removed.

Chapter 1 ACL Configuration Commands

Table of Contents