H3C SR6600 Command Reference Manual

Also see for SR6600 SPE-FWM: Configuration guide Configuration guide Configuration guide Command reference Command reference

Contents

25Table 13 ICMPv6 message names supported in IPv6 advanced ACL rulesICMPv6 message name ICMPv6 message type ICMPv6 message codeecho-reply 129 0echo-request 128 0err-Header-field 4 0frag-time-exceeded 3 1hop-limit-exceeded 3 0host-admin-prohib 1 1host-unreachable 1 3neighbor-advertisement 136 0neighbor-solicitation 135 0network-unreachable 1 0packet-too-big 2 0port-unreachable 1 4redirect 137 0router-advertisement 134 0router-solicitation 133 0unknown-ipv6-opt 4 2unknown-next-hdr 4 1DescriptionUse the rule command to create or edit an IPv6 advanced ACL rule. You can edit ACL rules only whenthe match order is config.Use the undo rule command to delete an entire IPv6 advanced ACL rule or some attributes in the rule. Ifno optional keywords are provided, you delete the entire rule. If optional keywords or arguments areprovided, you delete the specific attributes.By default, an IPv6 advanced ACL does not contain any rule.Within an ACL, the permit or deny statement of each rule must be unique. If the ACL rule you are creatingor editing has the same deny or permit statement as another rule in the ACL, your creation or editingattempt fails.To view rules in an ACL and their rule IDs, use the display acl ipv6 all command.Related commands: acl ipv6, display ipv6 acl, and step.Examples# Create an IPv6 ACL rule to permit TCP packets with the destination port of 80 from 2030:5060::/64to FE80:5060::/96. system-view[Sysname] acl ipv6 number 3000[Sysname-acl6-adv-3000] rule permit tcp source 2030:5060::/64 destination fe80:5060::/96destination-port eq 80