rule (basic ACL6 view)
Function
The rule command adds or modifies basic ACL6 rules.
The undo rule command deletes an ACL6 rule.
By default, there is no basic ACL6 rule.
Parameters
| Parameter | Description | Value |
|---|---|---|
| rule-id | Specifies the ID of a rule.
NOTE:
ACL rule IDs assigned automatically by the device starts from the step value. The default step value is 5. With this step value, the device creates ACL rules with IDs being 5, 10, 15, and so on. |
The value is an integer that ranges from 0 to 4294967294. |
| deny | Indicates to drop packets conforming to certain conditions. | - |
| permit | Indicates to forward packets conforming to certain conditions. | - |
| fragment | Indicates that the rule is valid for all fragments. If this parameter is specified, the rule is valid for all fragments. |
- |
| source { source-ipv6-address prefix-length | source-ipv6-address/prefix-length } | Indicates the source address and prefix of a packet. | source-ipv6-address indicates the source address and is expressed in hexadecimal notation. prefix-length is an integer that ranges from 1 to 128. |
| any | Indicates any source address. | - |
| time-range time-name | Indicates that the configured ACL6 rule is effective
only in the specified time range. time-name indicates the name
of the time range during which the ACL6 rule takes effect. NOTE:
When you specify the time-range parameter to reference a time range to the ACL, if the specified time-name does not exit, the ACL does not take effect. |
The value of time-name is a string of 1 to 32 characters. |
Usage Guidelines
Usage Scenario
A basic ACL6 matches packets based on information such as source IP addresses, fragment flags, and time ranges.
Prerequisites
An ACL6 has been created before the rule is configured.
Precautions
If the specified rule ID already exists and the new rule conflicts with the original rule, the new rule replaces the original rule.
To modify an existing rule, delete the old rule, and then create a new rule. Otherwise, the configuration result may be incorrect.
When you use the undo rule command to delete an ACL6 rule, the rule ID must exist. If the rule ID is unknown, you can use the display acl ipv6 command to view the rule ID.
The undo rule command deletes an ACL6 rule even if the ACL6 rule is referenced. Exercise caution when you run the undo rule command.
