1-22
rule (for IPv6 ACLs)
Syntax
rule [ rule-id ] { deny | permit } [ dscp rule-string rule-mask ] [ ip-protocol rule-string rule-mask ]
[ src-ip ipv6-address prefix-length ] [ dest-ip ipv6-address prefix-length ] [ [ src-port rule-string
rule-mask | dest-port rule-string rule-mask ] * | [ icmpv6-type rule-string rule-mask | icmpv6-code
rule-string rule-mask ] * ] [ time-range time-name ]
undo rule rule-id
View
IPv6 ACL view
Parameter
rule-id: ACL rule ID, in the range of 0 to 65534.
deny: Drops the matched packets.
permit: Permits the matched packets.
dscp rule-string rule-mask: Specifies the traffic class information. Arguments rule-string and rule-mask
indicate the content string and mask and consist of two hexadecimal numbers respectively.
ip-protocol rule-string rule-mask: Specifies the next header information. Arguments rule-string and
rule-mask indicate the content string and mask and consist of two hexadecimal numbers respectively.
src-ip ipv6-address prefix-length: Specifies the source IPv6 address information. Arguments
ipv6-address and prefix-length indicate the IPv6 address and prefix length respectively, where
prefix-length must be in the range 1 to 128.
dest-ip ipv6-address prefix-length: Specifies the destination IPv6 address information. Arguments
ipv6-address and prefix-length indicate the IPv6 address and prefix length respectively, where
prefix-length must be in the range 1 to 128.
src-port rule-string rule-mask: Specifies the source TCP/UDP port information. Arguments rule-string
and rule-mask indicate the content string and mask and consist of four hexadecimal numbers
respectively.
dest-port rule-string rule-mask: Specifies the destination TCP/UDP port information. Arguments
rule-string and rule-mask indicate the content string and mask and consist of four hexadecimal numbers
respectively.
icmpv6-type rule-string rule-mask: Specifies the ICMPv6 message type information. Arguments
rule-string and rule-mask indicate the content string and mask and consist of two hexadecimal numbers
respectively.
icmpv6-code rule-string rule-mask: Specifies the ICMPv6 message code information. Arguments
rule-string and rule-mask indicate the content string and mask and consist of two hexadecimal numbers
respectively.
time-range time-name: Specifies the time range in which the rule takes effect. time-name indicates the
name of a time range and must be a case-insensitive string of 1 to 32 characters that starts with an
English letter. To avoid confusion, it cannot be all.
Description
Use the rule command to define an ACL rule.
To Next Page
Loading...
Need help?
General