982
Examples
# Add a blacklist entry for the IP address 192.168.1.2 and set the aging time to 20 minutes for the
entry.
<Sysname> system-view
[Sysname] blacklist ip 192.168.1.2 timeout 20
Related commands
blacklist enable
blacklist global enable
display blacklist ip
blacklist ipv6
Use blacklist ipv6 to add an IPv6 blacklist entry.
Use undo blacklist ipv6 to delete an IPv6 blacklist entry.
Syntax
blacklist ipv6 source-ipv6-address [ vpn-instance vpn-instance-name ] [ timeout minutes ]
undo blacklist ipv6 source-ipv6-address [ vpn-instance vpn-instance-name ]
Default
No IPv6 blacklist entries exist.
Views
System view
Predefined user roles
network-admin
Parameters
source-ipv6-address: Specifies an IPv6 address for the blacklist entry. Packets sourced from this
address will be dropped.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the blacklist
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not
specify this option if the blacklist is on the public network.
timeout minutes: Specifies the aging time in minutes for the blacklist entry, in the range of 1 to 1000.
If you do not specify this option, the blacklist entry never ages out. You must delete it manually.
Usage guidelines
The undo blacklist ipv6 command deletes only manually added IPv6 blacklist entries. To delete
dynamically added IPv6 blacklist entries, use the reset blacklist ipv6 command.
A blacklist entry with an aging time is not saved to the configuration file and cannot survive a reboot.
You can use the display blacklist ipv6 command to display all effective IPv6 blacklist entries.
Examples
# Add a blacklist entry for the IPv6 address 2012::12:25 and set the aging time to 10 minutes for the
entry.
<Sysname> system-view
[Sysname] blacklist ipv6 2012::12:25 timeout 10
Related commands
blacklist enable
To Next Page
Loading...
Need help?
General
