F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

routing [ type routing-type ]: Matches a specific type of routing header or any type of routing header. The

routing-type argument takes a value in the range of 0 to 255. If no routing header type is specified, the

rule matches any type of routing header.

source { source-address source-prefix | source-address/source-prefix | any }: Matches a source IP

address. The source-address and source-prefix arguments represent a source IPv6 address and address

prefix length in the range of 1 to 128. The any keyword represents any IPv6 source address.

time-range time-range-name: Specifies a time range for the rule. The time-range-name argument takes a

case-insensitive string of 1 to 32 characters. It must start with an English letter. If the time range is not

configured, the system creates the rule. However, the rule using the time range can take effect only after

you configure the timer range.

vpn-instance vpn-instance-name: Applies the rule to packets in a VPN. The vpn-instance-name argument

takes a case-sensitive string of 1 to 31 characters. If no VPN instance is specified, the rule applies to

non-VPN packets.

Usage guidelines

Within an ACL, the permit or deny statement of each rule must be unique. If the ACL rule you are creating

or editing has the same deny or permit statement as another rule in the ACL, your creation or editing

attempt fails.

To view rules in an ACL and their rule IDs, use the display acl ipv6 all command.

Examples

# Create an IPv6 basic ACL rule to deny the packets from any source IP segment but 1001::/16,

312 4 :1123::/32, or FE80:5060:1001::/48.

<Sysname> system-view

[Sysname] acl ipv6 number 2000

[Sysname-acl6-basic-2000] rule permit source 1001:: 16

[Sysname-acl6-basic-2000] rule permit source 3124:1123:: 32

[Sysname-acl6-basic-2000] rule permit source fe80:5060:1001:: 48

[Sysname-acl6-basic-2000] rule deny source any

Related commands

• acl ipv6

• display ipv6 acl

• step

• time-range

rule comment

Use rule comment to add a comment about an existing ACL rule or edit its comment to make the rule easy