ZXR10ZSRV2CongurationGuide(IPv6)
StepCommandFunction
range<0-65535>-<0-65535>}][{[established],[rst<rst>],[ac
k<ack>],[fin<fin>],[syn<syn>],[urg<urg>],[psh<psh>]}][d
scp<dscp-value>][{[routing],[authen],[destopts],[fragment
s],[hop-by-hop],[esp]}][time-range<time-range-name>]
ZXR10(config-ipv6-acl)#rule[<rule-id>]{permit|
deny}[flowlabel<flowlabel-value>]udp{<source-ip
v6-address>|any}[<oper><source-port>]{<destination
-ipv6-address>|any}[<oper><destination-port>][dscp
<dscp-value>][{[routing],[authen],[destopts],[fragments],[h
op-by-hop],[esp]}][time-range<time-range-name>]
CongurestheIPv6ACLrule
basedonUDP.
ZXR10(config-ipv6-acl)#rule[<rule-id>]{permit
|deny}[flowlabel<flowlabel-value>]icmp
{<source-ipv6-address>|any}{<destination-ipv6-address>|
any}[{<icmp-type>|<icmp-type-value>}[<icmp-code>]][dscp
<dscp-value>][{[routing],[authen],[destopts],[fragments],[h
op-by-hop],[esp]}][time-range<time-range-name>]
CongurestheIPv6ACLrule
basedonICMP.
3ZXR10(config)#resequence-access-listipv6
<acl-name>[<base>[<increment>]]
Numberstherulesinthe
speciedACLagain.
<rule-id>:uniqueidentityofaruleintheIPv6ACLtable,range:1to2147483644.This
IDdeterminesthesequenceoftheruleintheIPv6ACLtable.Ifthisparameterisnot
specied,thesysteminsertstheruleattheendofthetablebydefaultandallocates
therule-idaccordingtothedefaultbaseandincrement.
<0-255>|ipv6|<protocol-type>:Indicatestheprotocoltypetobematched,whichcan
beoneofthe“tcp”,“udp”and“ip”keywords,orcanbeanintegerrepresentingtheIP
protocolnumberandrangingfrom0to255.Ifthisparameterissetto“ipv6”,itindicates
thatanyprotocoltypeismatched.
<icmp-type>:ICMPtype,options:destination-unreachable,packet-too-big,
time-exceeded,parameter-problem,echo-request,echo-reply,mld-query,mld-report,
mld-reduction,router-solicitation,router-advertisment,nd-ns,nd-na,redirectand
router-renumbering.
<icmp-type-value>:ICMPpackettypeeld,range:0–255.
<icmp-code>:ICMPmessagetype,range:0to255.
<protocol-type>:IPprotocoltype,options:gre,ospf,pimandvrrp.
<operator>:portoperation,options:eq,geandle.
<source-porttype>:sourceporttype,options:ftp,telnet,smtp,domain,nger,www,
pop2,pop3,bgpandlogin.
<destination-porttype>:destinationporttype,options:ftp,telnet,smtp,domain,nger,
www,pop2,pop3,bgpandlogin.
20-2
SJ-20140504150128-018|2014-05-10(R1.0)ZTEProprietaryandCondential