R211x-HP Flexfabric 11900 ACL and QoS Command Reference

27
Table 11 Match criteria and other rule information for IPv6 advanced ACL rules
Parameters Function Descri
p
tion
source
{ source-address
source-prefix |
source-address/so
urce-prefix | any }
Specifies a source IPv6
address.
The source-address and source-prefix arguments represent
an IPv6 source address, and prefix length in the range of 1
to 128.
The any keyword represents any IPv6 source address.
destination
{ dest-address
dest-prefix |
dest-address/dest-
prefix | any }
Specifies a destination IPv6
address.
The dest-address and dest-prefix arguments represent a
destination IPv6 address, and prefix length in the range of
1 to 128.
The any keyword specifies any IPv6 destination address.
counting
Counts the number of times
the IPv6 advanced ACL rule
has been matched.
The counting keyword enables match counting specific to
rules, and the hardware-count keyword in the packet-filter
ipv6 command enables match counting for all rules in an
ACL. If the counting keyword is not specified, matches for
the rule are not counted.
dscp dscp
Specifies a DSCP
preference.
The dscp argument can be a number in the range of 0 to
63, or in words: af11 (10), af12 (12), af13 (14), af21
(18), af22 (20), af23 (22), af31 (26), af32 (28), af33
(30), af41 (34), af42 (36), af43 (38), cs1 (8), cs2 (16), cs3
(24), cs4 (32), cs5 (40), cs6 (48), cs7 (56), default (0), or
ef (46).
flow-label
flow-label-value
Specifies a flow label value
in an IPv6 packet header.
The flow-label-value argument is in the range of 0 to
1048575.
fragment
Applies the rule to only
non-first fragments.
Without this keyword, the rule applies to all fragments and
non-fragments.
routing [ type
routing-type ]
Specifies routing header
types.
routing-type: Value of the routing header type, in the range
of 0 to 255.
If you specify the type routing-type option, the rule applies
to the specified type of routing header. Otherwise, the rule
applies to any type of routing header.
time-range
time-range-name
Specifies a time range for
the rule.
The time-range-name argument is a case-insensitive string
of 1 to 32 characters. It must start with an English letter. If
the time range is not configured, the system creates the
rule. However, the rule using the time range can take effect
only after you configure the timer range.
For more information about time range, see ACL and QoS
Configuration Guide.
vpn-instance
vpn-instance-name
Applies the rule to a VPN
instance.
The vpn-instance-name argument is a case-sensitive string
of 1 to 31 characters.
If no VPN instance is specified, the rule applies only to
non-VPN packets.
If the protocol argument is tcp (6) or udp (17), set the parameters shown in Table 12.