3-2To do… Use the command… RemarksCreate or modify a rulerule [ rule-id ] { deny | permit }[ fragment | logging | source{ ipv6-address prefix-length |ipv6-address/prefix-length |any } | time-rangetime-range-name ] *RequiredTo create or modify multiplerules, repeat this step.Note that the loggingkeywords are not supported ifthe ACL is to be referenced bya QoS policy for trafficclassification.Set the rule numbering step step step-value Optional5 by defaultConfigure a description for thebasic IPv6 ACL description textOptionalBy default, a basic IPv6 ACLhas no ACL description.Configure a rule description rule rule-id comment textOptionalBy default, an IPv6 ACL rulehas no rule description.Note that:z You can only modify the existing rules of an ACL that uses the match order of config. Whenmodifying a rule of such an ACL, you may choose to change just some of the settings, in whichcase the other settings remain the same.z You cannot create a rule with, or modify a rule to have, the same permit/deny statement as anexisting rule in the ACL.z When the ACL match order is auto, a newly created rule will be inserted among the existing rulesin the depth-first match order. Note that the IDs of the rules still remain the same.z You can modify the match order of an IPv6 ACL with the acl ipv6 number acl6-number [ nameacl6-name ] match-order { auto | config } command, but only when the ACL does not contain anyrules.z The rule specified in the rule comment command must already exist.Configuring an Advanced IPv6 ACLAdvanced IPv6 ACLs match packets based on the source IPv6 address, destination IPv6 address,protocol carried over IPv6, and other protocol header fields such as the TCP/UDP source port number,TCP/UDP destination port number, ICMP message type, and ICMP message code.Advanced IPv6 ACLs are numbered in the range 3000 to 3999. Compared with basic IPv6 ACLs, theyallow of more flexible and accurate filtering.
