acl ipv6 name (user ACL6)

Function

The acl ipv6 name command creates a user ACL6 and displays the ACL6 view. If a user ACL6 already exists, this command directly displays the ACL6 view.

The undo acl ipv6 name command deletes a created user ACL6.

By default, no user ACL6 has been created.

Format

acl ipv6 name groupName ucl [ match-order { config | auto } ]

Parameters

Parameter Description Value
ucl

Creates a user ACL with a keyword.

-

match-order

Indicates the order in which user ACL6 rules are matched.

-

config

Indicates the configuration order, meaning that ACL6 rules are matched in the order they are configured.

This mechanism applies only when rule numbers are not specified. If rule numbers are specified, the ACL6 rules are matched based on the numbers in ascending order.

-

auto
auto Indicates the automatic order, meaning that ACL6 rules are matched based on the depth-first principle.
  • The depth-first principle matches ACL6 rules based on how precise the rules are. The more matching criteria an ACL6 rule contains, the more precise the rule is.
  • If two rules have the same precision, they are matched in the order they are configured.

-

name groupName

Creates a user ACL with a name.

The value is a string of 1 to 64 case-sensitive characters, spaces not supported. The name must start with a letter or digit, and cannot contain only digits.

Views

System view

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
acl write

Usage Guidelines

Usage Scenario

User ACL6s match packets based on the source/destination IPv6 address, source/destination service group, source/destination user group, source/destination port number, and protocol type. To create a user ACL6, run the acl ipv6 command.

Configuration Impact

The undo acl ipv6 all command deletes all types of ACLs on a device. If the ACLs being deleted are applied to services, these services are interrupted. Before deleting an ACL6, ensure that the ACL6 is not referenced by services.

Follow-up Procedure

Run the rule command to configure a rule for a created ACL6. Then the ACL6 rule can be applied to match packets.

Run the description command to configure a description for a created ACL6. The description can contain the functions of the ACL6, facilitating applications.

Example

# Create a ucl ACL6 named ucl-acl6.
<HUAWEI> system-view
[~HUAWEI] acl ipv6 name ucl-acl6 ucl
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >