10
To do…
Use the command…
Remarks
Enter system view
system-view
—
Copy an existing IPv4 ACL to
create a new IPv4 ACL
acl copy
{
source-acl-number
|
name
source-acl-name
}
to
{
dest-acl-number
|
name
dest-acl-name
}
Required
Copying an IPv6 ACL
Follow these steps to copy an IPv6 ACL:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Copy an existing IPv6 ACL to
generate a new one of the same
category
acl ipv6 copy
{
source-acl6-number
|
name
source-acl6-name
}
to
{
dest-acl6-number
|
name
dest-acl6-name
}
Required
Packet filtering with ACLs
You can apply an ACL to filter incoming IPv4 or IPv6 packets. On VLAN interfaces, you can apply only
IPv4 ACLsand Ethernet frame header ACLs, and these ACLs filter only Layer 3 packets.
Applying an IPv4 ACL for Packet Filtering
Follow these steps to apply an IPv4 ACL for packets filtering:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter Layer 2 Ethernet interface
view or VLAN interface view
interface
interface-type
interface-number
—
Apply an IPv4 ACL to the interface
to filter IPv4 packets
packet-filter
{
acl-number
|
name
acl-name
}
inbound
Required
By default, no IPv4 ACL is applied
to the interface.
Applying an IPv6 ACL for Packet Filtering
Follow these steps to apply an IPv6 ACL for packet filtering:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter Layer 2 Ethernet interface
view
interface
interface-type
interface-number
—
Apply an IPv6 ACL to the interface
to filter IPv6 packets
packet-filter ipv6
{
acl6-number
|
name
acl6-name
}
inbound
Required
By default, no IPv6 ACL is applied
to the interface.