3Com 4800G Series, Configuration Manual

Page: 854 / 1246

854 C
HAPTER
64: IP
V
6 ACL C
ONFIGURATION
<Sysname> system-view
[Sysname] acl ipv6 number 3000
[Sysname-acl6-adv-3000] rule permit tcp source 2030:5060::9050/64
# Verify the configuration.
[Sysname-acl6-adv-3000] display acl ipv6 3000
Advanced IPv6 ACL 3000, named -none-, 1 rule,
ACL’s step is 5
rule 0 permit tcp source 2030:5060::9050/64
Copying an IPv6 ACL
This feature allows you to copy an existent IPv6 ACL to generate a new one, which
is of the same type and has the same match order, match rules, rule numbering
step and descriptions as the source IPv6 ACL.
Configuration
Prerequisites
Make sure that the source IPv4 ACL exists while the destination IPv4 ACL does not.
Configuration Procedure Follow these steps to copy an IPv6 ACL:
c
CAUTION:
■
The source IPv6 ACL and the destination IPv6 ACL must be of the same type.
■
The generated IPv6 ACL does not take the name of the source IPv6 ACL.
Displaying and
Maintaining IPv6 ACLs
IPv6 ACL
Configuration
Example
Network Requirements As shown in Figure 254, a company interconnects its departments through the
switch.
To do… Use the command… Remarks
Enter system view system-view -
Copy an existing IPv6 ACL
to generate a new one of
the same type acl ipv6 copy { source-acl6-number |
name source-acl6-name } to
{ dest-acl6-number | name
dest-acl6-name }
Required
To do… Use the command… Remarks
Display information about a specified
or all IPv6 ACLs display acl ipv6 { acl6-number |
all | name acl6-name }
Available in any
view
Display information about ACL uses of
a switch display acl resource Available in any
view
Display the configuration and status
on time range display time-range { time-name |
all }
Available in any
view
Clear statistics about a specified or all
IPv6 ACLs that are referenced by
upper layer software reset acl ipv6 counter
{ acl6-number | all | name
acl6-name }
Available in user
view