Zte ZXR10 5250 Series - Egress-Acl Hybrid Rule Type-Ipv6-Tcp

Chapter4ServiceConguration
ParameterDescription
<destination-ipv6addr>
ThedestinationnetworkorhostaddressofthetransmittedIPv6
packet.ThestandardIPv6addressformatisused,suchas
abcd:EF12::1234
<dipv6-mask>
Destinationmask.Itisusedfordestinationandrepresentedby
oneinteger.Thevaluerangeis1to128.
any
MatchesalldestinationIPv6addresses.Thedestinationand
destinationmaskareall0s.
<vlan-id>
ThisruleisonlyvalidformessageswiththespeciedVLANID.
Ignorethisruleforothermessages.TheruleofVLANIDis1
to4094.
Guidelines
ipv6-ip-protocolrulecanmatchIPv6–speciedprotocoleld,source-speciedIPv6,any
sourceIPv6,destination-speciedIPv6,anydestinationIPv6andVLANeld.
4.13.70egress-aclhybridruletype-ipv6-tcp
Purpose
ThiscommandsetstherulethatthehybridegressACLmatchesIPv6-TCPpackets.
CommandMode
HybridegressACLcongurationmode
Syntax
rule<1-500>{permit|deny}ipv6tcp{<source-ipv6addr><sipv6-mask>|any}[[source-port<0
-65535><sport-mask>]{<destination-ipv6addr><dipv6-mask>|any}[dest-port<0-65535><dpor
t-mask>][<vlan-id>]]
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
ipv6tcp
ThisruleisonlyvalidforIPv6TCPpacket.Otherpacketsignore
thisrule.
source-port<0-65535>
TCPsourceportnumberofthetransmittedpacket
Thesource-portparameterresolvesomeknownportnumber.
Alsotheportnumberandmaskcanbeentered.
4-283
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential