H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – ACL
H3C S7500E Series Ethernet Switches Chapter 3 IPv6 ACL Configuration
3-6
3.5 Displaying and Maintaining IPv6 ACLs
To do… Use the command… Remarks
Display information about
a specified or all IPv6
ACLs
display acl ipv6 { acl6-number |
all | name acl6-name }
Available in any
view
Display information about
ACL uses of a switch
display acl resource [ slot
slot-id ]
Available in any
view
Display the configuration
and status on time range
display time-range { time-name
| all }
Available in any
view
Clear statistics about a
specified or all IPv6 ACLs
that are referenced by
upper layer software
reset acl ipv6 counter
{ acl6-number | all | name
acl6-name }
Available in user
view
3.6 IPv6 ACL Configuration Example
3.6.1 Network Requirements
As shown in Figure 3-1, a company interconnects its departments through the switch.
Configure an ACL to deny access of the R&D department to external networks.
3.6.2 Network Diagram
Figure 3-1 Network diagram for IPv6 ACL configuration
3.6.3 Configuration Procedure
# Create an IPv6 ACL 2000.
<Switch> system-view
[Switch] acl ipv6 number 2000
[Switch-acl6-basic-2000] rule deny source 4050::9000/120
[Switch-acl6-basic-2000] quit