acl ipv6 name

Function

The acl ipv6 name command creates a named ACL6 and enters the ACL6 view.

The undo acl ipv6 name command deletes a named ACL6.

By default, no named ACL6 is created.

Format

acl ipv6 name acl6-name [ advance | basic | ucl | acl6-number ] [ match-order { auto | config } ]

undo acl ipv6 name acl6-name

Parameters

Parameter	Description	Value
acl6-name	Specifies the name of an ACL6.	The value is a string of 1 to 64 case-sensitive characters without spaces. The value must start with a letter.
advance	Indicates an advanced ACL6.	-
basic	Indicates a basic ACL6.	-
ucl	Indicates an user ACL6.	-
acl6-number	Specifies the number of an ACL6.	The value is an integer. The value range is as follows: The value of a basic ACL6 ranges from 2000 to 2999. The value of an advanced ACL6 ranges from 3000 to 3999. The value of a user ACL6 ranges from 6000 to 9999.
match-order { auto \| config }	Indicates the matching order of ACL6 rules. auto: indicates that ACL6 rules are matched based on the depth first principle. If the ACL6 rules are of the same depth first order, they are matched in ascending order of rule IDs. config: indicates that ACL6 rules are matched based on the configuration order. The ACL6 rules are matched based on the configuration order only when the rule ID is not specified. If rule IDs are specified, the ACL6 rules are matched in ascending order of rule IDs. If the match-order parameter is not specified when you create an ACL6, the default match order config is used.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An ACL6 is a set of rules composed of permit or deny clauses. ACL6s are mainly used in QoS. ACL6s can limit data flows to improve network performance. For example, ACL6s are configured on an enterprise network to limit video data flows, which lowers the network load and improves network performance.

Follow-up Procedure

Run the rule command to configure ACL6 rules and apply the ACL6 to services for which packets need to be filtered.

Precautions

The Switch allocates a number to named ACL6s that have no specified number. The number allocated depends on the following:
- If only the type of a named ACL6 is specified, the number of the named ACL6 allocated by the Switch is the maximum value of the named ACL6 of the type.
- If the number and the type of a named ACL6 are not specified, the Switch considers the named ACL6 as the advanced ACL6 and allocates the maximum value as the number of the named ACL6.
After you create a named ACL6 by using the acl ipv6 name command, the ACL6 still exists even if you exit from the ACL6 view. You must run the undo acl ipv6 name acl6-name or undo acl ipv6 acl6-number command to delete the ACL6.
When you delete an ACL6 that has been referenced by other services, the services will be interrupted. Therefore, before deleting an ACL6, ensure that the ACL6 is not in use.
For the S2720-EI, S5720I-SI, S5720-LI, S5720S-LI, S5720S-SI, S5720-SI, S5730S-EI, S5730-SI, S6720-LI, S6720S-LI, S6720S-SI, and S6720-SI, before creating an user ACL6, the ACL resource allocation mode device must be set to NAC mode using the assign resource-template acl-mode, restarted to make the NAC mode take effect.

Example

# Create basic ACL6 2001 named test2.

<HUAWEI> system-view
[HUAWEI] acl ipv6 name test2 2001