H3C S3600 Series Command Manual

1-10
Parameters
Parameters of the rule command
rule-id: ACL rule ID, in the range of 0 to 65534.
deny: Drops the matched packets.
permit: Permits the matched packets.
rule-string: ACL rule information, which can be a combination of the parameters described in
Table 1-6.
Table 1-6 Parameters for basic IPv4 ACL rules
Parameters Function Description
source { sour-addr
sour-wildcard | any }
Specifies a source address.
The sour-addr sour-wildcard argument
specifies a source IP address in dotted
decimal notation. Setting the wildcard
to a zero indicates a host address. The
any keyword indicates any source IP
address.
fragment
Indicates that the rule applies
only to non-tail fragments.
––
time-range time-name
Specifies the time range in
which the rule takes effect.
time-name: specifies the name of the
time range in which the rule is active; a
string comprising 1 to 32 characters.
sour-wildcard is the complement of the wildcard mask of the source subnet mask. For example, you
need to input 0.0.255.255 to specify the subnet mask 255.255.0.0.
Parameters of the undo rule command
rule-id: Rule ID, which must the ID of an existing ACL rule. You can obtain the ID of an ACL rule by using
the display acl command.
fragment: Removes the settings concerning non-tail fragments in the ACL rule.
source: Removes the settings concerning source address in the ACL rule.
time-range: Removes the settings concerning time range in the ACL rule.
Description
Use the rule command to define an ACL rule.
Use the undo rule command to remove an ACL rule or specified settings of an ACL rule.
To remove an ACL rule using the undo rule command, you need to provide the ID of the ACL rule. If no
other arguments are specified, the entire ACL rule is removed. Otherwise, only the specified information
of the ACL rule is removed.
Note that:

H3C S3600 Series Specifications

General

Brand	H3C
Model	S3600 Series
Category	Switch
Language	English