Chapter 4 Service Configuration
Parameter
Description
any
(second)
Matches all destination IPv6 addresses. The destination and
destination mask are all 0s.
<
vlan-id
>
This rule is only valid for messages with the specified VLAN ID.
Ignore this rule for other messages. The rule of VLAN ID is 1
to 4094.
Guidelines
ipv6-ip-protocol rule can match IPv6–specified protocol field, source-specified IPv6, any
source IPv6, destination-specified IPv6, any destination IPv6 and VLAN field.
4.13.33 ingress-acl hybrid rule type-ipv6-tcp
Purpose
This command sets the rule that the hybrid ingress ACL matches the IPv6-TCP packet.
Command Mode
Hybrid ingress ACL configuration mode
Syntax
rule
<
1-500
>{
permit
|
deny
}
ipv6 tcp
{<
source-ipv6addr
><
sipv6-mask
>|
any
}[
source-port
<
0
-65535
><
sport-mask
>]{<
destination-ipv6addr
><
dipv6-mask
>|
any
}[
dest-port
<
0-65535
><
dpor
t-mask
>][<
vlan-id
>]
Parameter Description
Parameter
Description
<
1-500
>
Rule number.
permit
If the condition matches, access is permitted.
deny
If the condition matches, access is denied.
ipv6 tcp
This rule is only valid for IPv6 TCP packet. Other packets ignore
this rule.
source-port
<
0-65535
>
TCP source port number of the transmitted packet
The source-port parameter resolve some known port number.
Also the port number and mask can be entered.
<
sport-mask
>
Source port mask.
<
source-ipv6addr
>
IPv6 Source network or host of the transmitted package. The
standard IPv6 address format is used, such as abcd:EF12::123 4.
4-243
SJ-20130731155059-003|2013-11-27 (R1.0)
ZTE Proprietary and Confidential