acl ipv6 name (interface-based ACL6)

Function

The acl ipv6 name command creates an interface-based ACL6 and displays the ACL6 view. If the interface-based ACL6 already exists, this command directly displays the ACL6 view.

The undo acl ipv6 name command deletes a created interface-based ACL6.

By default, no interface-based ACL6 is created.

Format

acl ipv6 name interface-based-acl6-name interface [ match-order { config | auto } ]

Parameters

Parameter Description Value
interface

Creates an interface-based ACL6 with a keyword.

-

match-order

Indicates the order in which interface-based ACL6 rules are matched.

-

config

Indicates the configuration order, meaning that ACL6 rules are matched in the order they are configured.

This mechanism applies only when rule numbers are not specified. If rule numbers are specified, the ACL6 rules are matched based on the numbers in ascending order.

-

auto
Indicates the automatic order, meaning that ACL6 rules are matched based on the depth-first principle.
  • The depth-first principle matches ACL6 rules based on how precise the rules are. The more matching criteria an ACL6 rule contains, the more precise the rule is.
  • If two rules have the same precision, they are matched in the order they are configured.

-

name interface-based-acl6-name

Creates an interface-based ACL6 with a name.

The value is a string of 1 to 64 case-sensitive characters, spaces not supported. The name must start with a letter or digit, and cannot contain only digits.

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
acl write

Usage Guidelines

Usage Scenario

An interface-based ACL6 defines rules for filtering packets based on the inbound interfaces of packets. To create an interface-based ACL6, run the acl ipv6 command.

Configuration Impact

The undo acl ipv6 all command deletes all types of ACLs on a device. If the ACLs being deleted are applied to services, these services are interrupted. Before deleting an ACL6, ensure that the ACL6 is not referenced by services.

Follow-up Procedure

Run the rule command to configure a rule for a created interface-based ACL6. Then the ACL6 rule can be applied to match packets.

Run the description command to configure a description for a created interface-based ACL6. The description can contain the functions of the interface-based ACL6, facilitating applications.

Example

# Create an interface-based ACL6 named interface-based-acl6.
<HUAWEI> system-view
[~HUAWEI] acl ipv6 name interface-based-acl6 interface
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >