H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 421)

42-4
z
You can modify the match order of an IPv6 ACL with the acl ipv6 number acl6-number [ name
acl6-name ] match-order { auto | config } command but only when it does not contain any rules.
z
The rule specified in the rule comment command must have existed.
Configuration Examples
# Create IPv6 ACL 3000 to permit the TCP packets with the source address 2030:5060::9050/64 to
pass.
system-view
[Sysname] acl ipv6 number 3000
[Sysname-acl6-adv-3000] rule permit tcp source 2030:5060::9050/64
# Verify the configuration.
[Sysname-acl6-adv-3000] display acl ipv6 3000
Advanced IPv6 ACL 3000, named -none-, 1 rule,
ACL's step is 5
rule 0 permit tcp source 2030:5060::9050/64
Copying an IPv6 ACL
This feature allows you to copy an existent IPv6 ACL to generate a new one, which is of the same type
and has the same match order, match rules, rule numbering step and descriptions as the source IPv6
ACL.
Configuration Prerequisites
Make sure that the source IPv4 ACL exists while the destination IPv4 ACL does not.
Configuration Procedure
Follow these steps to copy an IPv6 ACL:
To do… Use the command… Remarks
Enter system view system-view —
Copy an existing IPv6 ACL to
generate a new one of the same
type acl ipv6 copy { source-acl6-number | name
source-acl6-name } to { dest-acl6-number |
name dest-acl6-name }
Required
z
The source IPv6 ACL and the destination IPv6 ACL must be of the same type.
z
The generated IPv6 ACL does not take the name of the source IPv6 ACL.