5-9
To do… Use the command… Remarks
Set the rule numbering step
step
step-value
Optional
5 by default
Configure a description for the
advanced IPv6 ACL
description
text
Optional
By default, an advanced IPv6
ACL has no ACL description.
Configure a rule description
rule
rule-id
comment
text
Optional
By default, an IPv6 ACL rule has
no rule description.
Note that:
z You can only modify the existing rules of an ACL that uses the rule order of config. When
modifying a rule of such an ACL, you may choose to change just some of the settings, in which
case the other settings remain the same.
z You cannot create a rule with, or modify a rule to have, the same permit/deny statement as an
existing rule in the ACL.
z When the ACL rule order is auto, a newly created rule will be inserted among the existing rules in
the depth-first order. Note that the IDs of the rules still remain the same.
z You can modify the rule order of an IPv6 ACL with the acl ipv6 number acl6-number [ name
acl6-name ] match-order { auto | config } command, but only when the ACL does not contain any
rules.
z The rule specified in the rule comment command must already exist.
Copying an IPv6 ACL
This feature allows you to copy an existing IPv6 ACL to generate a new one, which is of the same type
and has the same rule order, rules, rule numbering step, and descriptions as the source IPv6 ACL.
z Configuration Prerequisites
Make sure that the source IPv6 ACL exists while the destination IPv6 ACL does not.
z Configuration Procedure
Follow these steps to copy an IPv6 ACL:
To do… Use the command… Remarks
Enter system view
system-view
—
Copy an existing IPv6 ACL to
generate a new one of the same
type
acl ipv6 copy
{ source-acl6-number |
name
source-acl6-name }
to
{ dest-acl6-number |
name
dest-acl6-name }
Required