beautypg.com

Copying an ipv6 acl – H3C Technologies H3C S3100 Series Switches User Manual

Page 353

background image

5-9

To do…

Use the command…

Remarks

Set the rule numbering step

step step-value

Optional

5 by default

Configure a description for the
advanced IPv6 ACL

description text

Optional

By default, an advanced IPv6
ACL has no ACL description.

Configure a rule description

rule rule-id comment text

Optional

By default, an IPv6 ACL rule has
no rule description.

Note that:

z

You can only modify the existing rules of an ACL that uses the rule order of config. When

modifying a rule of such an ACL, you may choose to change just some of the settings, in which

case the other settings remain the same.

z

You cannot create a rule with, or modify a rule to have, the same permit/deny statement as an

existing rule in the ACL.

z

When the ACL rule order is auto, a newly created rule will be inserted among the existing rules in

the depth-first order. Note that the IDs of the rules still remain the same.

z

You can modify the rule order of an IPv6 ACL with the acl ipv6 number acl6-number [ name

acl6-name ] match-order { auto | config } command, but only when the ACL does not contain any

rules.

z

The rule specified in the rule comment command must already exist.

Copying an IPv6 ACL

This feature allows you to copy an existing IPv6 ACL to generate a new one, which is of the same type

and has the same rule order, rules, rule numbering step, and descriptions as the source IPv6 ACL.

z

Configuration Prerequisites

Make sure that the source IPv6 ACL exists while the destination IPv6 ACL does not.

z

Configuration Procedure

Follow these steps to copy an IPv6 ACL:

To do…

Use the command…

Remarks

Enter system view

system-view

Copy an existing IPv6 ACL to
generate a new one of the same
type

acl ipv6 copy
{ source-acl6-number | name
source-acl6-name } to
{ dest-acl6-number | name
dest-acl6-name }

Required