Configuring an IPv6 basic ACL

1. Enter system view.

system-view

N/A

2. Create an IPv6 basic ACL view and enter its view.

acl ipv6 basic { acl-number | name acl-name } [ match-order { auto | config } ]

acl ipv6 number acl-number [ match-order { auto | config } ]

By default, no ACLs exist.

The value range for a numbered IPv6 basic ACL is 2000 to 2999.

Use the acl ipv6 number acl-number or acl ipv6 basic acl-number command to create a numbered IPv6 basic ACL.

Use the acl ipv6 number acl-number or acl ipv6 basic acl-number command to enter the view of a numbered IPv6 basic ACL.

Use the acl ipv6 basic name acl-name command to enter the view of a named IPv6 basic ACL.

3. (Optional.) Configure a description for the IPv6 basic ACL.

description text

By default, an IPv6 basic ACL does not have a description.

4. (Optional.) Set the rule numbering step.

step step-value [ start start-value ]

By default, the rule numbering step is 5 and the start rule ID is 0.

5. Create or edit a rule.

rule [ rule-id ] { deny | permit } [ counting | fragment | logging | routing [ type routing-type ] | source { source-address source-prefix | source-address/source-prefix | any } | time-range time-range-name ] *

By default, no IPv6 basic ACL rules exist.

The logging keyword takes effect only when the module (for example, packet filtering) that uses the ACL supports logging.

If an ACL is for QoS traffic classification or packet filtering:

• Do not specify the fragment keyword.

• Do not specify the routing keyword if the ACL is for outbound application.

6. (Optional.) Add or edit a rule comment.

rule rule-id comment text

By default, no rule comment is configured.