H3C S5120-EI series Configuration Manual

Also see for S5120-EI Series: Configuration guide Installation manual Configuration guide Configuration guide Operation manual

Contents

H3C S5120-EI series Configuration Manual Manual pdf 18 page image

8Step Command Remarks2. Create an IPv6advanced ACLand enter itsview.acl ipv6 number acl6-number[ name acl6-name ][ match-order { auto | config } ]By default, no ACL exists.IPv6 advanced ACLs are numbered in the range of3000 to 3999.You can use the acl ipv6 name acl6-name commandto enter the view of a named IPv6 ACL.3. Configure adescription forthe IPv6advanced ACL.description textOptional.By default, an IPv6 advanced ACL has no ACLdescription.4. Set the rulenumberingstep.step step-value Optional.5 by default.5. Create or edit arule.rule [ rule-id ] { deny | permit }protocol [ { { ack ack-value | finfin-value | psh psh-value | rstrst-value | syn syn-value | urgurg-value } * | established } |counting | destination { destdest-prefix | dest/dest-prefix |any } | destination-portoperator port1 [ port2 ] | dscpdscp | flow-labelflow-label-value | fragment |icmp6-type { icmp6-typeicmp6-code | icmp6-message }| logging | routing [ typerouting-type ] | source { sourcesource-prefix |source/source-prefix | any } |source-port operator port1[ port2 ] | time-rangetime-range-name ] *By default IPv6 advanced ACL does not contain anyrule.If an IPv6 advanced ACL is for QoS trafficclassification or packet filtering, do not specify thefragment or routing keyword, or specify neq forthe operator argument.The logging and counting keywords (even ifspecified) do not take effect for QoS trafficclassification.6. Add or edit arule comment. rule rule-id comment text Optional.By default, no rule comments are configured.7. Add or edit arule rangeremark.rule [ rule-id ] remark text Optional.By default, no rule range remarks are configured.8. Enablecounting ACLrule matchesperformed inhardware.hardware-count enableOptional.Disabled by default.When the ACL is referenced by a QoS policy, thiscommand does not take effect.Configuring an Ethernet frame header ACLEthernet frame header ACLs, also called "Layer 2 ACLs," match packets based on Layer 2 protocolheader fields, such as source MAC address, destination MAC address, 802.1p priority (VLAN priority),and link layer protocol type.To configure an Ethernet frame header ACL: