3-3Configuring an Advanced IPv6 ACLAdvanced IPv6 ACLs match packets based on the source IPv6 address, destination IPv6 address,protocol carried over IPv6, and other protocol header fields such as the TCP/UDP source port number,TCP/UDP destination port number, ICMP message type, and ICMP message code.Advanced IPv6 ACLs are numbered in the range 3000 to 3999. Compared with basic IPv6 ACLs, theyallow of more flexible and accurate filtering.Configuration PrerequisitesIf you want to reference a time range in a rule, define it with the time-range command first.Configuration ProcedureFollow these steps to configure an advanced IPv6 ACL:To do… Use the command… RemarksEnter system view system-view ––Create an advancedIPv6 ACL and enterits viewacl ipv6 number acl6-number[ name acl6-name ] [ match-order{ auto | config } ]RequiredThe default match order is config.If you specify a name for an IPv6 ACLwhen creating the ACL, you can usethe acl ipv6 name acl6-namecommand to enter the view of the ACLlater.Create or modify arulerule [ rule-id ] { deny | permit }protocol [ { established | { ackack-value | fin fin-value | pshpsh-value | rst rst-value | synsyn-value | urg urg-value } * } |destination { dest dest-prefix |dest/dest-prefix | any } |destination-port operator port1[ port2 ] | dscp dscp | fragment |icmpv6-type { icmpv6-typeicmpv6-code | icmpv6-message } |logging | source { sourcesource-prefix |source/source-prefix | any } |source-port operator port1[ port2 ] | time-rangetime-range-name ] *RequiredTo create or modify multiple rules,repeat this step.Note that if the ACL is to be referencedby a QoS policy for trafficclassification, the logging andfragment keywords are not supportedand the operator argument cannot beneq.Set the rulenumbering step step step-value Optional5 by defaultConfigure adescription for theadvanced IPv6 ACLdescription textOptionalBy default, an advanced IPv6 ACL hasno ACL description.Configure a ruledescription rule rule-id comment textOptionalBy default, an IPv6 ACL rule has norule description.Note that:
