HPE FlexNetwork 5510 HI Series Acl And Qos Configuration Guide

6
Step Command Remarks
fin-value |
psh
psh-value |
rst
rst-value |
syn
syn-value |
urg
urg-value } * |
established
} |
counting
|
destination
{ dest-address dest-wildcard |
any
} |
destination-port
operator
port1 [ port2 ] | {
dscp
dscp |
{
precedence
precedence |
tos
tos } * } |
fragment
|
icmp-type
{ icmp-type [ icmp-code ] |
icmp-message } |
logging
|
source
{ source-address
source-wildcard |
any
} |
source-port
operator port1
[ port2 ] |
time-range
time-range-name |
vpn-instance
vpn-instance-name ] *
The
logging
keyword takes effect
only when the module (for
example, packet filtering) that
uses the ACL supports logging.
If an ACL is for QoS traffic
classification or packet filtering:
• Do not specify the
vpn-instance keyword if the
ACL is for outbound
application.
•
Do not specify neq for the
operator argument.
6. (Optional.) Add or edit a rule
comment.
rule
rule-id
comment
text
By default, no rule comments are
configured.
Configuring an IPv6 advanced ACL
IPv6 advanced ACLs match packets based on the following criteria:
• Source IPv6 addresses.
• Destination IPv6 addresses.
• Packet priorities.
• Protocol numbers.
• Other protocol header fields such as the TCP/UDP source port number, TCP/UDP destination
port number, ICMPv6 message type, and ICMPv6 message code.
Compared to IPv6 basic ACLs, IPv6 advanced ACLs allow more flexible and accurate filtering.
To configure an IPv6 advanced ACL:
Step Command Remarks
1. Enter system
view.
system-view
N/A
2. Create an IPv6
advanced ACL
and enter its
view.
acl ipv6 number
acl-number
[
name
acl-name ]
[
match-order
{
auto
|
config
} ]
By default, no ACL exists.
IPv6 advanced ACLs are numbered in the range of
3000 to 3999.
You can use the
acl ipv6 name
acl-name
command to enter the view of a named ACL.
3. (Optional.)
Configure a
description for
the IPv6
advanced ACL.
description
text
By default, an IPv6 advanced ACL has no ACL
description.
4. (Optional.) Set
the rule
numbering step.
step
step-value The default setting is 5.
5. Create or edit a
rule.
rule
[ rule-id ] {
deny
|
permit
} protocol [ { {
ack
ack-value |
fin
fin-value |
psh
psh-value |
rst
rst-value |
syn
By default, IPv6 advanced ACL does not contain
any rule.
The
logging
keyword takes effect only when the

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English