3-13 IPv6 ACL ConfigurationWhen configuring IPv6 ACLs, go to these sections for information you are interested in:z Creating a Time Rangez Configuring a Basic IPv6 ACLz Configuring an Advanced IPv6 ACLz Copying an IPv6 ACLz Displaying and Maintaining IPv6 ACLsz IPv6 ACL Configuration ExampleCreating a Time RangeRefer to Creating a Time Range.Configuring a Basic IPv6 ACLBasic IPv6 ACLs match packets based on only source IPv6 address. They are numbered in the range2000 to 2999.Configuration PrerequisitesIf you want to reference a time range in a rule, define it with the time-range command first.Configuration ProcedureFollow these steps to configure an IPv6 ACL:To do… Use the command… RemarksEnter system view system-view ––Create a basic IPv6ACL view and enter itsviewacl ipv6 numberacl6-number [ nameacl6-name ] [ match-order{ auto | config } ]RequiredThe default match order is config.If you specify a name for an IPv6 ACLwhen creating the ACL, you can use theacl ipv6 name acl6-name command toenter the view of the ACL later.Create or modify a rulerule [ rule-id ] { deny |permit } [ fragment |logging | source{ ipv6-address prefix-length |ipv6-address/prefix-length |any } | time-rangetime-range-name ] *RequiredTo create or modify multiple rules, repeatthis step.Note that the logging and fragmentkeywords are not supported if the ACL isto be referenced by a QoS policy for trafficclassification.Set the rule numberingstep step step-value Optional5 by default
