H3C S3100 Series Command Manual

4-8
[Sysname-acl6-basic-2000] rule 8 deny source fe80:5060::8050/96
rule (advanced IPv6 ACL view)
Syntax
rule [ rule-id ] { deny | permit } protocol [ { { ack ack-value | fin fin-value | psh psh-value | rst rst-value
| syn syn-value | urg urg-value } * | established } | counting | destination { dest dest-prefix |
dest/dest-prefix | any } | destination-port operator port1 [ port2 ] | dscp dscp | flow-label
flow-label-value | fragment | icmpv6-type { icmpv6-type icmpv6-code | icmpv6-message } | logging |
source { source source-prefix | source/source-prefix | any } | source-port operator port1 [ port2 ] |
time-range time-range-name ] *
undo rule rule-id [ { { ack | fin | psh | rst
| syn | urg } * | established } | counting | destination |
destination-port | dscp | flow-label | fragment | icmpv6-type | logging | source | source-port |
time-range ] *
View
Advanced IPv6 ACL view
Default Level
2: System level
Parameters
rule-id: IPv6 ACL rule number, in the range 0 to 65534.
deny: Drops matched packets.
permit: Allows matched packets to pass.
protocol: Protocol carried over IPv6. It can be a number in the range 0 to 255, or in words, gre (47),
icmpv6 (58), ipv6, ipv6-ah (51), ipv6-esp (50), ospf (89), tcp (6), or udp (17).
Table 4-2 shows the
parameters that can be specified after the protocol argument.
Table 4-2 Match criteria and other rule information for advanced IPv6 ACL rules
Parameters Function Description
source
{ source
source-prefix |
source/source-prefix |
any
}
Specifies a source IPv6
address.
The source and source-prefix arguments
specify an IPv6 source address and its prefix
length in the range 1 to 128.
The
any
keyword indicates any IPv6 source
address.
destination
{ dest
dest-prefix |
dest/dest-prefix |
any
}
Specifies a destination IPv6
address.
The dest and dest-prefix arguments specify a
destination IPv6 address, and its prefix length in
the range 1 to 128.
The
any
keyword indicates any IPv6 destination
address.
counting
Specifies the counting of IPv6
ACL rule matches
-
dscp
dscp Specifies a DSCP preference
The dscp argument can be a number in the
range 0 to 63, or in words,
af11
(10),
af12
(12),
af13
(14),
af21
(18),
af22
(20),
af23
(22),
af31
(26),
af32
(28),
af33
(30),
af41
(34),
af42
(36),
af43
(38),
cs1
(8),
cs2
(16),
cs3
(24),
cs4
(32),
cs5
(40),
cs6
(48),
cs7
(56),
default
(0), or
ef
(46).

H3C S3100 Series Specifications

General

Brand	H3C
Model	S3100 Series
Category	Switch
Language	English