Whe
le, you need to specify the
ip-protocol
combination as TCP or UDP, that is, 0x06 or 0x11. To specify the
6-code
keyword for a rule, you need to specify the
ip-protocol
rule-string
0x3a.
z
The total length of the fields in a rul
more than 32 byt
, the rule
example, if you define the
src-ip
and
dest-ip
fields in rule 1, which are 16
2 bytes in total, you can define no more fields f
e rule.
n configuring IPv6 ACL rules, note that:
z
To specify the
src-port
or
dest-port
keyword for a ru
rule-string rule-mask
icmpv6-type
or
icmpv
rule-mask
combination as ICMPv6, that is,
e cannot be
es; otherwise
configuration will fail. For
bytes each and 3
or th
Configuration prerequisites
z
To configure time range-based
to crea
esponding time ranges
first. For information about tim
c
e
IPv6 ACL rules, you need
e range configuration, refer to se
te the corr
tion
Configuring Time Rang
.
z
The settings to be specified in
Configuration procedure
F
define an IPv
the rule are determined.
6 ACL rule:
ollow these steps to
Command
Description
Operation
Enter system view
system-view
—
Create an IPv6 ACL and enter
IPv6 ACL view
ed
acl number
acl-number
Requir
Define an ACL rule
}
ng
-address
[
double-tag
] [
dscp rule-string
tocol
]
[
ipv6-type
] [
src-ip
ipv6-address prefix-length
]
[
src-mac
rule-string
rule-mask
] [
vlan
rule-string
keyword in the
cify
rule-mask
combination as TCP
or UDP, that is, 0x06 or 0x11.
To specify the
icmpv6-type
or
icmpv6-code
keyword, you
0x3a.
rule
[
rule-id
] {
deny
|
permit
[
cos
rule-stri
rule-mask
]
[
dest-ip ipv6
prefix-length
] [
dest-mac
rule-string rule-mask
]
rule-mask
] [
ip-pro
rule-string rule-mask
Required
To specify the
src-port
or
dest-port
command, you need to spe
the
ip-protocol
rule-string
rule-mask
] [ [
src-port
rule-string rule-mask
|
dest-port rule-string
rule-mask
]
*
|
[
icmpv6-type
rule-string rule-mask
|
need to specify the
ip-protocol
rule-string rule-mask
combination as ICMPv6, that is,
icmpv6-code rule-string
rule-mask
]
*
] [
time-range
time-name
]
Assign a description string to
rule
rule-id
comment
text
Optional
the ACL rule
No description by default
As
the
description
text
No description by default
sign a description string to
ACL
Optional
Note that:
44-11