HP Comware 5 Debug Manual Vol 2

ManualsBrandsHP ManualsNetwork HardwareHP HSR6804 Router Chassis

Field

Description

outbound Outbound direction, indicating to filter sent packets.

udp The protocol is UDP.

interface

Interface that filters packets.

ACL6

IPv6 ACL used to filter packets.

Examples

# Enable IPv6 firewall. Configure packet filtering to deny incoming ICMPv6, TCP, UDP, and GRE packets

from passing through GigabitEthernet 1/1.

<Sysname> system-view

[Sysname] firewall ipv6 enable

[Sysname] acl ipv6 number 3000

[Sysname-acl6-adv-3000] rule deny icmpv6

[Sysname-acl6-adv-3000] rule deny tcp

[Sysname-acl6-adv-3000] rule deny udp

[Sysname-acl6-adv-3000] rule deny gre

[Sysname-acl6-adv-3000] quit

[Sysname] interface gigabitethernet 1/1

[Sysname-GigabitEthernet1/1] firewall packet-filter ipv6 3000 inbound

[Sysname-GigabitEthernet1/1] quit

[Sysname] quit

•

For a single-core device:

# Enable debugging for ICMPv6 packet filtering. Output similar to the following example is generated

when an ICMPv6 packet arrives at GigabitEthernet 1/1:

<Sysname> debugging firewall ipv6 icmpv6

*Oct 13 14:53:28:299 2008 Sysname FLT6/7/debug:

The inbound icmpv6 packet is denied on the interface GigabitEthernet1/1:

(5600::12)->(5000::1), 60 bytes, ACL6 3000.

// IPv6 packet filter used IPv6 ACL 3000 to deny the ICMPv6 packet on GigabitEthernet 1/1.

# Enable debugging for TCP packet filtering. Output similar to the following example is generated when

a TCP packet arrives at GigabitEthernet 1/1:

<Sysname> debugging firewall ipv6 tcp

*Oct 13 14:53:05:725 2008 Sysname FLT6/7/debug:

The inbound tcp packet is denied on the interface GigabitEthernet1/1: (5600::12

10)->(5000::1 20), 60 bytes, ACL6 3000.

// IPv6 packet filter used IPv6 ACL 3000 to deny the TCP packet on GigabitEthernet 1/1.

# Enable debugging for UDP packet filtering. Output similar to the following example is generated when

a UDP packet arrives at GigabitEthernet 1/1:

<Sysname> debugging firewall ipv6 udp

*Oct 13 14:52:46:51 2008 Sysname FLT6/7/debug:

The inbound udp packet is denied on the interface GigabitEthernet1/1: (5600::12

10)->(5000::1 20), 60 bytes, ACL6 3000.

// IPv6 packet filter used IPv6 ACL 3000 to deny the UDP packet on GigabitEthernet 1/1.

# Enable debugging for packet filtering of protocols other than ICMPv6, TCP, and UDP. Output similar

to the following example is generated when a GRE packet arrives at GigabitEthernet 1/1: