H3C S3100 Series Operation Manual page 353

To do...
Set the rule numbering step
Configure a description for the
advanced IPv6 ACL
Configure a rule description
Note that:
You can only modify the existing rules of an ACL that uses the rule order of config. When
modifying a rule of such an ACL, you may choose to change just some of the settings, in which
case the other settings remain the same.
You cannot create a rule with, or modify a rule to have, the same permit/deny statement as an
existing rule in the ACL.
When the ACL rule order is auto, a newly created rule will be inserted among the existing rules in
the depth-first order. Note that the IDs of the rules still remain the same.
You can modify the rule order of an IPv6 ACL with the acl ipv6 number acl6-number [ name
acl6-name ] match-order { auto | config } command, but only when the ACL does not contain any
rules.
The rule specified in the rule comment command must already exist.
Copying an IPv6 ACL
This feature allows you to copy an existing IPv6 ACL to generate a new one, which is of the same type
and has the same rule order, rules, rule numbering step, and descriptions as the source IPv6 ACL.
Configuration Prerequisites
Make sure that the source IPv6 ACL exists while the destination IPv6 ACL does not.
Configuration Procedure
Follow these steps to copy an IPv6 ACL:
To do...
Enter system view
Copy an existing IPv6 ACL to
generate a new one of the same
type
Use the command...
step step-value
description text
rule rule-id comment text
Use the command...
system-view
acl ipv6 copy
{ source-acl6-number | name
source-acl6-name } to
{ dest-acl6-number | name
dest-acl6-name }
5-9
Remarks
Optional
5 by default
Optional
By default, an advanced IPv6
ACL has no ACL description.
Optional
By default, an IPv6 ACL rule has
no rule description.
Remarks
—
Required