564
• blacklist global enable
• display blacklist ip
blacklist ipv6
Use blacklist ipv6 to add an IPv6 blacklist entry.
Use undo blacklist ipv6 to delete a manually added IPv6 blacklist entry.
Syntax
blacklist ipv6 source-ipv6-address [ vpn-instance vpn-instance-name ] [ timeout minutes ]
undo blacklist ipv6 source-ipv6-address [ vpn-instance vpn-instance-name ]
Default
No IPv6 blacklist entry exists.
Views
System view
Predefined user roles
network-admin
Parameters
source-ipv6-address: Specifies an IPv6 address for the blacklist entry. Packets sourced from this address
will be blacklisted.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the blacklist entry belongs.
The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. Do not specify this
option if the specified IPv6 address is on the public network.
timeout minutes: Sets the aging time in minutes for the blacklist entry, in the range of 1 to 1000. If you
do not specify this option, the blacklist entry never ages out. You can delete it manually.
Usage guidelines
The undo blacklist ipv6 command deletes only manually added IPv6 blacklist entries. To delete
dynamically added IPv6 blacklist entries, use the reset blacklist ipv6 command.
A blacklist entry with an aging time is not saved to the configuration file and cannot survive a reboot.
You can use the display blacklist ipv6 command to display all effective IPv6 blacklist entries.
Examples
# Add a blacklist entry for the IPv6 address 2012::12:25 and set the aging time to 10 minutes for the
entry.
<Sysname> system-view
[Sysname] blacklist ipv6 2012::12:25 timeout 10
Related commands
• blacklist enable
• blacklist global enable
• blacklist ip