acl ipv6 (system view)

Function

The acl ipv6 command creates a numbered ACL6 and enters the ACL6 view.

The undo acl ipv6 command deletes a numbered ACL6.

By default, no numbered ACL6 is created.

Format

acl ipv6 [ number ] acl6-number [ match-order { auto | config } ]

undo acl ipv6 { all | [ number ] acl6-number }

Parameters

Parameter	Description	Value
number	Indicates the number that identifies an ACL6.	-
acl6-number	Specifies an ACL6 number.	The value is an integer. The value range is as follows: The value of a basic ACL6 ranges from 2000 to 2999. The value of an advanced ACL6 ranges from 3000 to 3999. The value of a user ACL6 ranges from 6000 to 9999.
match-order { auto \| config }	Indicates the matching order of ACL6 rules. auto: indicates that ACL6 rules are matched based on the depth first principle. If the ACL6 rules are of the same depth first order, they are matched in ascending order of rule IDs. config: indicates that ACL6 rules are matched based on the configuration order. The ACL6 rules are matched based on the configuration order only when the rule ID is not specified. If rule IDs are specified, the ACL6 rules are matched in ascending order of rule IDs. If the match-order parameter is not specified when you create an ACL6, the default match order config is used.	-
all	Indicates that all the configured ACL6s are deleted.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An ACL6 is a set of rules composed of permit or deny clauses. ACL6 rules can be referenced by modules. ACL6s are applicable to QoS. ACL6s can limit data flows to improve network performance. For example, ACL6s are configured on an enterprise network to limit video data flows, which lowers the network load and improves network performance.

Follow-up Procedure

Run the rule command to configure ACL6 rules and apply the ACL6 to services for which packets need to be filtered.

Precautions

After you create a named ACL6 using the acl ipv6 command, the ACL6 still exists even if you exit from the ACL6 view. You must run the undo acl ipv6 acl6-number command to delete the ACL6.
When you delete an ACL6 that has been referenced by other services, the services will be interrupted. Before deleting an ACL6, ensure that the ACL6 is not in use.
All ACL6s can be deleted on the device in one go, but this method is not recommended.
For the S2720-EI, S5720I-SI, S5720-LI, S5720S-LI, S5720S-SI, S5720-SI, S5730S-EI, S5730-SI, S6720-LI, S6720S-LI, S6720S-SI, and S6720-SI, before creating an user ACL6, the ACL resource allocation mode device must be set to NAC mode using the assign resource-template acl-mode, restarted to make the NAC mode take effect.

Example

# Create an advanced ACL6 with the number of 3000.

<HUAWEI> system-view
[HUAWEI] acl ipv6 number 3000