9To do… Use the command… RemarksConfigure a description for theIPv6 advanced ACL description textOptionalBy default, an IPv6 advancedACL has no ACL description.Set the rule numbering step step step-value Optional5 by default.Create or edit a rulerule [ rule-id ] { deny | permit } protocol[ { { ack ack-value | fin fin-value | pshpsh-value | rst rst-value | syn syn-value |urg urg-value } * | established } |counting | destination { dest dest-prefix |dest/dest-prefix | any } |destination-port operator port1 [ port2 ]| dscp dscp | flow-label flow-label-value| fragment | icmp6-type { icmp6-typeicmp6-code | icmp6-message } |logging | source { source source-prefix |source/source-prefix | any } |source-port operator port1 [ port2 ] |time-range time-range-name ] *RequiredBy default IPv6 advanced ACLdoes not contain any rule.To create or edit multiple rules,repeat this step.If the ACL is for packet filtering,the operator argument cannot beneq.If the ACL is for QoS trafficclassification, do not specify thefragment keyword or specify neqfor the operator argument. Thekeywords can cause ACLapplication failure.The logging and countingkeywords (even if specified) donot take effect for QoS.Configure or edit a ruledescription rule rule-id comment textOptionalBy default, an IPv6 advancedACL rule has no rule description.Enable counting ACL rulematches performed inhardwarehardware-count enableOptionalDisabled by default.When the ACL is referenced by aQoS policy, this command doesnot take effect.Configuring an Ethernet frame header ACLEthernet frame header ACLs, also called "Layer 2 ACLs," match packets based on Layer 2 protocolheader fields such as source MAC address, destination MAC address, 802.1p priority (VLAN priority),and link layer protocol type.Follow these steps to configure an Ethernet frame header ACL:To do… Use the command… RemarksEnter system view system-view ––
