R2511-HP MSR Router Series Security Command Reference(V5)

399
• exactly: Specifies the exact match mode.
• normally: Specifies the normal match mode.
Usage guidelines
Packets are not filtered on an interface by default.
You can apply only one IPv4 ACL in one direction of an interface to filter packets.
Examples
# Apply ACL 2001 to interface Serial 2/0 to filter outbound packets.
<Sysname> system-view
[Sysname] interface serial 2/0
[Sysname-Serial2/0] firewall packet-filter 2001 outbound
Related commands
firewall fragments-inspect
firewall packet-filter ipv6
Use firewall packet-filter ipv6 to configure IPv6 packet filtering on the interface.
Use undo firewall packet-filter ipv6 to remove the IPv6 packet filtering setting on the interface.
Syntax
firewall packet-filter ipv6 { acl6-number | name acl6-name } { inbound | outbound }
undo firewall packet-filter ipv6 [ { acl6-number | name acl6-name } ] { inbound | outbound }
Default
IPv6 packets are not filtered on the interface.
Views
Interface view
Default command level
2: System level
Parameters
acl6-number: Specifies a basic ACL number in the range of 2000 to 2999, or an advanced ACL number
in the range of 3000 to 3999.
name acl6-name: Specifies the name of a basic or advanced IPv6 ACL; a case-insensitive string of 1 to
63 characters that must start with an English letter a to z or A to Z. To avoid confusion, the word "all"
cannot be used as the ACL name.
inbound: Filters packets received by the interface.
outbound: Filters packets forwarded by the interface.
Usage guidelines
You can apply only one IPv6 ACL in one direction of an interface to filter packets.
Examples
# Apply IPv6 ACL 2500 to Ethernet 1/1 to filter outbound packets.
<Sysname> system-view
[Sysname] interface ethernet 1/1