H3C S3100 8C SI User Manual

Operation Manual – ACL
H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration
1-7
Acl's step is 1
rule 0 deny source 192.168.0.1 0
1.2.3 Configuring Advanced ACL
An advanced ACL can filter packets by their source and destination IP addresses, the
protocols carried by IP, and protocol-specific features such as TCP/UDP source and
destination ports, ICMP message type and message code.
An advanced ACL can be numbered from 3000 to 3999. Note that ACL 3998 and ACL
3999 cannot be configured because they are reserved for cluster management.
Advanced ACLs support analysis and processing of three packet priority levels: type of
service (ToS) priority, IP priority and differentiated services codepoint (DSCP) priority.
Using advanced ACLs, you can define classification rules that are more accurate, more
abundant, and more flexible than those defined for basic ACLs.
I. Configuration Prerequisites
z To configure a time range-based advanced ACL rule, you need to create the
corresponding time ranges first. For information about of time range configuration,
refer to section
1.2.1 Configuring Time Range.
z The settings to be specified in the rule, such as source and destination IP
addresses, the protocols carried by IP, and protocol-specific features, are
determined.
II. Configuration Procedure
Table 1-3 Define an advanced ACL rule
Operation Command Description
Enter system view
system-view
—
Create an
advanced ACL and
enter advanced
ACL view
acl number acl-number
[ match-order { auto |
config } ]
Required
config by default
Define an ACL rule
rule [ rule-id ] { permit |
deny } protocol [ rule-string ]
Required
For information about protocol
and rule-string, refer to ACL
Commands.
Assign a
description string
to the ACL rule
rule rule-id comment text
Optional
No description by default
Assign a
description string
to the ACL
description text
Optional
No description by default

H3C S3100 8C SI Specifications

General

Brand	H3C
Model	S3100 8C SI
Category	Switch
Language	English