367
firewall packet-filter ipv6
Use
firewall packet-filter ipv6
to configure IPv6 packet filtering on the interface.
Use
undo firewall packet-filter ipv6
to remove the IPv6 packet filtering setting on the interface.
Syntax
firewall packet-filter ipv6
{
acl6-number
|
name
acl6-name
} {
inbound
|
outbound
}
undo firewall packet-filter ipv6
[ {
acl6-number
|
name
acl6-name
} ] {
inbound
|
outbound
}
Default
IPv6 packets are not filtered on the interface.
Views
Interface view
Default command level
2: System level
Parameters
acl-number
: Specifies a basic ACL number in the range of 2000 to 2999 or an advanced ACL number
in the range of 3000 to 3999.
name
acl6-name
: Specifies the name of a basic or advanced IPv6 ACL; a case-insensitive string of 1
to 63 characters that must start with an English letter a to z or A to Z. To avoid confusion, the word
"all" cannot be used as the ACL name.
inbound
: Specifies to filter packets received by the interface.
outbound
: Specifies to filter packets forwarded by the interface.
Usage guidelines
You can apply only one IPv6 ACL in one direction of an interface to filter packets.
Examples
# Apply IPv6 ACL 2500 to GigabitEthernet 3/0/1 to filter outbound packets.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1] firewall packet-filter ipv6 2500 outbound
reset firewall ipv6 statistics
Use
reset
firewall ipv6 statistics
to clear the packet filtering statistics of the IPv6 firewall.
Syntax
reset
firewall ipv6 statistics
{
all
|
interface
interface-type
interface-number
}
Views
User view
Default command level
1: Monitor level
Parameters
all
: Clears the packet filtering statistics on all interfaces of the IPv6 firewall.
