Command Manual – ACL
H3C S7500E Series Ethernet Switches Chapter 1 ACL Configuration Commands
1-6
Examples
# Create an absolute time range named test, setting it to become active from 00:00 on
January 1, 2008.
<Sysname> system-view
[Sysname] time-range test from 0:0 2008/1/1
# Create a periodic time range named test, setting it to be active between 14:00 and
18:00 on Saturday and Sunday.
<Sysname> system-view
[Sysname] time-range test 14:00 to 18:00 off-day
1.2 IPv4 ACL Configuration Commands
1.2.1 acl
Syntax
acl number acl-number [ name acl-name ] [ match-order { auto | config } ]
undo acl { all | name acl-name | number acl-number }
View
System view
Parameters
number: Defines a numbered access control list (ACL).
acl-number: IPv4 ACL number, in the range of 2000 to 4999.
z 2000 to 2999 for basic IPv4 ACLs
z 3000 to 3999 for advanced IPv4 ACLs
z 4000 to 4999 for Ethernet frame header ACLs
name acl-name: Specifies the name of the ACL, which is a case insensitive string of 1
to 32 characters. It must start with an English letter and cannot be the English word of
all to avoid confusion.
match-order: Sets the order in which ACL rules are matched.
z auto: Performs depth-first match.
z config: Performs matching against rules in the order in which they are configured.
all: All IPv4 ACLs.
Description
Use the acl command to enter IPv4 ACL view. If the ACL does not exist, it is created
first.
Use the undo acl command to remove a specified or all IPv4 ACLs.
To Next Page
Loading...
Need help?
General
