Command Manual (For Soliton) – ACL
H3C S3100 Series Ethernet Switches
Chapter 1 ACL Configuration Commands
1-25
1.1.14 rule (for IPv6 ACLs)
Syntax
rule
[
rule-id
] {
deny
|
permit
} [
dscp rule-string rule-mask
] [
ip-protocol rule-string
rule-mask
] [
src-ip ipv6-address prefix-length
] [
dest-ip ipv6-address prefix-length
]
[ [
src-port rule-string rule-mask
|
dest-port rule-string rule-mask
]
*
|
[
icmpv6-type
rule-string rule-mask
|
icmpv6-code rule-string rule-mask
]
*
] [
time-range
time-name
]
undo
rule
rule-id
View
IPv6 ACL view
Parameter
rule-id
: ACL rule ID, in the range of 0 to 65534.
deny
: Drops the matched packets.
permit
: Permits the matched packets.
dscp rule-string rule-mask
: Specifies the traffic class information. Arguments
rule-string
and
rule-mask
indicate the content string and mask and consist of two
hexadecimal numbers respectively.
ip-protocol rule-string rule-mask
: Specifies the next header information. Arguments
rule-string
and
rule-mask
indicate the content string and mask and consist of two
hexadecimal numbers respectively.
src-ip ipv6-address prefix-length
: Specifies the source IPv6 address information.
Arguments
ipv6-address
and
prefix-length
indicate the IPv6 address and prefix length
respectively, where
prefix-length
must be in the range 1 to 128.
dest-ip ipv6-address prefix-length
: Specifies the destination IPv6 address information.
Arguments
ipv6-address
and
prefix-length
indicate the IPv6 address and prefix length
respectively, where
prefix-length
must be in the range 1 to 128.
src-port rule-string rule-mask
: Specifies the source TCP/UDP port information.
Arguments
rule-string
and
rule-mask
indicate the content string and mask and consist
of four hexadecimal numbers respectively.
dest-port rule-string rule-mask
: Specifies the destination TCP/UDP port information.
Arguments
rule-string
and
rule-mask
indicate the content string and mask and consist
of four hexadecimal numbers respectively.
icmpv6-type rule-string rule-mask
: Specifies the ICMPv6 type information. Arguments
rule-string
and
rule-mask
indicate the content string and mask and consist of two
hexadecimal numbers respectively.
icmpv6-code rule-string rule-mask
: Specifies the ICMPv6 code information.
