HP VPN Firewall Appliances Network Management Command Reference

1087
index-number: Specifies an index number for the item, in the range of 1 to 65535. An item with a smaller
index-number will be matched first.
deny: Specifies the deny mode. If a route matches the item, the route is denied without matching against
the next item. If not, the route matches against the next item (suppose the IPv6 prefix list has multiple
items).
permit: Specifies the permit mode. If a route matches the item, it passes the IPv4 prefix list. If not, it
matches against the next item (suppose the IPv6 prefix list has multiple items).
ipv6-address prefix-length: Specifies an IPv6 prefix and prefix length. A prefix-length is in the range of 0
to 128. When specified as :: 0, the argument matches the default route.
greater-equal min-prefix-length: Greater than or equal to the minimum prefix length.
less-equal max-prefix-length: Less than or equal to the maximum prefix length.
The length relation is mask-length <= min-mask-length <= max-mask-length <= 128. If only the
min-prefix-length is specified, the prefix length range is [ min-prefix-length, 128 ]. If only the
max-prefix-length is specified, the prefix length range is [ prefix-length, max-prefix-length ]. If both the
min-prefix-length and max-prefix-length are specified, the prefix length range is [ min-prefix-length,
max-prefix-length ].
Usage guidelines
An IPv6 prefix list can have multiple items, each specifying a range of IPv6 prefixes. The relation between
items is logic OR. If a route passes an item of it, the route passes the IPv6 prefix list.
The IPv6 prefix range is determined by prefix-length and [ min-prefix-length, max-prefix-length ]. If both
mask-length and [ min-mask-length, max-mask-length ] are specified, then the IPv6 addresses must match
both of them.
If ipv6-address prefix-length is specified as :: 0, only the default route matches.
To match all routes, configure :: 0 less-equal 128 .
Examples
# Permit IPv6 addresses with a mask length between 32 bits and 64 bits.
<Sysname> system-view
[Sysname] ip ipv6-prefix abc permit :: 0 greater-equal 32 less-equal 64
# Deny IPv6 addresses with a prefix 3FFE:D00::/32, and a prefix length greater than or equal to 32 bits.
<Sysname> system-view
[Sysname] ip ipv6-prefix abc deny 3FFE:D00:: 32 less-equal 128
reset ip ipv6-prefix
Use reset ip ipv6-prefix to clear the IPv6 prefix list statistics.
Syntax
reset ip ipv6-prefix [ ipv6-prefix-name ]
Views
User view
Default command level
2: System level