Filter
Top Products
2116 CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS
By default, no rule description is created.
Example # Define a rule in IPv6 ACL 2000 and create a description for the rule.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule 0 permit source 2030:5060::9050/64
[Sysname-acl6-basic-2000] rule 0 comment This rule is used in eth 1
# Define a rule in IPv6 ACL 3000 and create a description for the rule.
<Sysname> system-view
[Sysname] acl ipv6 number 3000
[Sysname-acl6-adv-3000] rule 0 permit tcp source 2030:5060::9050/64
[Sysname-acl6-adv-3000] rule 0 comment This rule is used in eth 1
step (for IPv6)
Syntax step step-value
undo step
View Basic IPv6 ACL view, advanced IPv6 ACL view
Parameter step-value: The step in which the rules in the IPv6 ACL is numbered, in the range 1
to 20.
Description Use the
step command to set a rule numbering step for the IPv6 ACL.
Use the undo step command to restore the default.
By default, the rule numbering step is five.
When defining rules in an IPv6 ACL, you do not necessarily assign them numbers.
The system can do this automatically in steps. For example, if the default step
applies, rules you created are numbered 0, 5, 10, 15, and so on automatically.
One benefit of rule numbering step is that it allows you to insert new rules
between existing ones as needed. For example, after creating four rules numbered
0, 5, 10, 15 in an ACL configured with the step of 5, you can still insert a rule
numbered 1.
Any step change can result in renumbering. For example, after you change the
step in the above example from 5 to 2, the rules are renumbered 0, 2, 4, 6, and 8.
Note that even if the current step is the default, performing the undo step
command can still result in rule renumbering. Suppose that IPv6 ACL 3001 adopts
the default numbering step and contains two rules numbered 0 and 5. After you
insert rule 1 and rule 3, the rules are numbered 0, 1, 3, and 5. If you perform the
undo step command, they will be renumbered 0, 5, 10, and 15.
Example # Set the rule numbering step to 2 for IPv6 ACL 2000.