H3C SOHO IE4300, Command Reference Manual

Page: 2525 / 3296

10
minimum
: Specifies the minimum advertised hop limit. An RA message passes the check if its
current hop limit is not less than the minimum advertised hop limit.
limit
: Specifies the advertised hop limit in the range of 1 to 255.
Usage guidelines
If a hop limit match criterion is set, and the RA message's current hop limit is 0, the message will be
dropped.
Examples
# Set the maximum hop limit match criterion to 128 for RA guard policy policy1 .
<Sysname> system-view
[Sysname] ipv6 nd raguard policy policy1
[Sysname-raguard-policy-policy1] if-match hop-limit maximum 128
if-match prefix
Use
if-match prefix
to specify a prefix match criterion.
Use
undo if-match prefix
to delete the prefix match criterion.
Syntax
if-match prefix acl { ipv6-acl-number | name ipv6-acl-name }
undo if-match prefix acl
Default
No prefix match criterion exists.
Views
RA guard policy view
Predefined user roles
network-admin
Parameters
ipv6-acl-number : Specifies an IPv6 basic ACL by its number in the range of 2000 to 2999.
name ipv6-acl-name
: Specifies an IPv6 basic ACL by its name, a case-insensitive string of 1 to
63 characters. The name must start with an English letter. To avoid confusion, the name cannot be
all
.
Usage guidelines
An RA message passes the check if the advertised prefixes in the message match the prefixes set
by the ACL.
When you specify an ACL, follow these restrictions and guidelines:
•
If the ACL does not exist or does not contain a rule, the prefix match criterion does not take
effect.
•
If you specify the
vpn-instance
keyword for an ACL rule, the rule takes effect only on VPN
packets. If you do not specify the
vpn-instance
keyword for an ACL rule, the rule takes
effect only on public network packets.
Examples
# Use IPv6 basic ACL 2000 as the prefix match criterion for RA guard policy policy1 .
<Sysname> system-view
[Sysname] acl ipv6 basic 2000