3-13 IPv6 ACL ConfigurationWhen configuring IPv6 ACLs, go to these sections for information you are interested in:z Creating a Time Rangez Configuring a Basic IPv6 ACLz Configuring an Advanced IPv6 ACLz Configuring an Ethernet Frame Header ACLFor the Ethernet frame header ACL configuration, refer to 169HConfiguring an Ethernet Frame HeaderACL.z Copying an IPv6 ACLz Displaying and Maintaining IPv6 ACLsz IPv6 ACL Configuration ExampleCreating a Time RangeRefer to Creating a Time Range.Configuring a Basic IPv6 ACLBasic IPv6 ACLs match packets based on only source IPv6 address. They are numbered in the range2000 to 2999.Configuration PrerequisitesIf you want to reference a time range in a rule, define it with the time-range command first.Configuration ProcedureFollow these steps to configure an IPv6 ACL:To do… Use the command… RemarksEnter system view system-view ––Create a basic IPv6ACL view and enter itsviewacl ipv6 numberacl6-number [ nameacl6-name ] [ match-order{ auto | config } ]RequiredThe default match order is config.If you specify a name for an IPv6 ACLwhen creating the ACL, you can use theacl ipv6 name acl6-name command toenter the view of the ACL later.Create or modify a rulerule [ rule-id ] { deny |permit } [ fragment |logging | source{ ipv6-address prefix-length |ipv6-address/prefix-length |any } | time-rangetime-range-name ] *RequiredTo create or modify multiple rules, repeatthis step.Note that the logging and fragmentkeywords are not supported if the ACL isto be referenced by a QoS policy for trafficclassification.
