H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 16)

9
To do… Use the command… Remarks
Enter system view system-view —
Copy an existing IPv4 ACL to
create a new IPv4 ACL
acl copy { source-acl-number | name
source-acl-name } to { dest-acl-number | name
dest-acl-name }
Required
Copying an IPv6 ACL
Follow these steps to copy an IPv6 ACL:
To do… Use the command… Remarks
Enter system view system-view —
Copy an existing IPv6 ACL to
generate a new one of the same
category
acl ipv6 copy { source-acl6-number | name
source-acl6-name } to { dest-acl6-number |
name dest-acl6-name }
Required
Packet filtering with ACLs
You can use an ACL to filter incoming IPv4 or IPv6 packets on an Ethernet interface or a VLAN interface.
NOTE:
ACLs on VLAN interfaces filter only IPv4 packets forwarded at Layer 3.
Applying an IPv4 ACL for packet filtering
Follow these steps to apply an IPv4 ACL for packet filtering:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Apply an IPv4 basic, IPv4
advanced, or Ethernet frame
header ACL to the interface to filter
packets
packet-filter { acl-number | name
acl-name } inbound
Required
By default, no ACL is applied to
any interface.
Applying an IPv6 ACL for packet filtering
Follow these steps to apply an IPv6 ACL for packet filtering:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Apply an IPv6 basic or IPv6
advanced ACL to the interface to
filter IPv6 packets
packet-filter ipv6 { acl6-number |
name acl6-name } inbound
Required
By default, no IPv6 ACL is applied
to the interface.