1-18
Parameters of the undo rule command
rule-id: Rule ID, which must the ID of an existing ACL rule. You can obtain the ID of an ACL rule by using
the display acl command.
source: Removes the settings concerning the source address in the ACL rule.
source-port: Removes the settings concerning the source port in the ACL rule. This keyword is only
available to ACL rules with their protocol types set to TCP or UDP.
destination: Removes the settings concerning the destination address in the ACL rule.
destination-port: Removes the settings concerning the destination port in the ACL rule. This keyword
is only available to ACL rules with their protocol types set to TCP or UDP.
icmp-type: Removes the settings concerning the ICMP type and message code in the ACL rule. This
keyword is only available to ACL rules with their protocol type set to ICMP.
igmp-type: Removes the settings concerning the IGMP type in the ACL rule. This keyword is only
available to ACL rules with their protocol type set to IGMP.
precedence: Removes the precedence-related settings in the ACL rule.
tos: Removes the ToS-related settings in the ACL rule.
dscp: Removes the DSCP-related settings in the ACL rule.
ttl: Removes the TTL-related settings in the ACL rule.
time-range: Removes the time range settings in the ACL rule.
fragment: Removes the settings concerning non-tail fragments in the ACL rule.
z Note the following when assigning an advanced ACL to the hardware:
z The fragment keywords are not supported.
z When you specify the ttl keyword, the ttl argument can only be set to 0, 1 or 255.
z When defining the source or destination port information, operator (in Table 1-11) can not be “neq”.
z When defining the source or destination port information, you can specify up to four port ranges
with the range operator.
Description
Use the rule command to define an ACL rule.
Use the undo rule command to remove an ACL rule or specified settings of an ACL rule.
To remove an ACL rule using the undo rule command, you need to provide the ID of the ACL rule. If no
other arguments are specified, the entire ACL rule is removed. Otherwise, only the specified information
of the ACL rule is removed.
Note that:
z With the config match order specified for the advanced ACL, you can modify any existent rule. The
unmodified part of the rule remains. With the auto match order specified for the ACL, you cannot
modify any existent rule; otherwise the system prompts error information.
To Next Page
Loading...
Need help?
General