2-6
z You can modify the match order of an ACL with the acl number acl-number [ name acl-name ]
match-order { auto | config } command, but only when the ACL does not contain any rules.
z The rule specified in the rule comment command must already exist.
Copying an ACL
This feature allows you to copy an existing ACL to generate a new one, which is of the same type and
has the same match order, rules, rule numbering step and descriptions as the source ACL.
Configuration Prerequisites
Make sure that the source ACL exists while the destination ACL does not.
Configuration Procedure
Follow these steps to copy an ACL:
To do… Use the command… Remarks
Enter system view
system-view
—
Copy an existing ACL to
generate a new one of the
same type
acl copy { source-acl-number |
name source-acl-name } to
{ dest-acl-number | name
dest-acl-name }
Required
z The source ACL and the destination ACL must be of the same type.
z The destination ACL does not take the name of the source ACL.
Displaying and Maintaining ACLs
To do... Use the command… Remarks
Display information about one or all
ACLs
display acl { acl-number | all |
name acl-name }
Available in any view
Display the usage of ACL resources
display acl resource
Available in any view
Display the configuration and status of
one or all time ranges
display time-range
{ time-range-name | all }
Available in any view
Clear statistics on one or all ACLs
except for user-defined ACLs
reset acl counter
{ acl-number | all | name
acl-name }
Available in user view