Operation Manual – ACLH3C S5500-EI Series Ethernet Switches Chapter 3 IPv6 ACL Configuration3-3[Sysname] acl ipv6 number 2000[Sysname-acl6-basic-2000] rule permit source 2030:5060::9050/64[Sysname-acl6-basic-2000] rule deny source fe80:5060::8050/96# Verify the configuration.[Sysname-acl6-basic-2000] display acl ipv6 2000Basic IPv6 ACL 2000, named -none-, 2 rules,ACL's step is 5rule 0 permit source 2030:5060::9050/64rule 5 deny source FE80:5060::8050/963.3 Configuring an Advanced IPv6 ACLAdvanced ACLs filter packets based on the source IPv6 address, destination IPv6address, protocol carried on IPv6, and other protocol header fields such as theTCP/UDP source port, TCP/UDP destination port, ICMP message type, and ICMPmessage code.Advanced IPv6 ACLs are numbered in the range 3000 to 3999. Compared with basicIPv6 ACLs, they allow of more flexible and accurate filtering.3.3.1 Configuration PrerequisitesIf you want to reference a time range to a rule, define it with the time-range commandfirst.3.3.2 Configuration ProcedureFollow these steps to configure an advanced IPv6 ACL:To do… Use the command… RemarksEnter system view system-view ––Create and enteradvanced IPv6 ACL viewacl ipv6 numberacl6-number [ nameacl6-name ][ match-order { auto |config } ]RequiredThe default match order isconfig.If you specify a name foran IPv6 ACL whencreating the ACL, you canuse the acl ipv6 nameacl6-name command toenter the view of the ACLlater.
