Command Manual – ACL
H3C S7500E Series Ethernet Switches Chapter 1 ACL Configuration Commands
1-12
Description
Use the reset acl counter command to clear statistics about a specified or all IPv4
ACLs that are referenced by upper layer software.
Examples
# Clear statistics about IPv4 ACL 2001, which is referenced by upper layer software.
<Sysname> reset acl counter 2001
# Clear statistics about the IPv4 ACL named flow, which is referenced by upper layer
software.
<Sysname> reset acl counter name flow
1.2.7 rule (in basic IPv4 ACL view)
Syntax
rule [ rule-id ] { deny | permit } [ fragment | logging | source { sour-addr sour-wildcard
| any } | time-range time-name | vpn-instance vpn-instance-name ] *
undo rule rule-id [ fragment | logging | source | time-range | vpn-instance ] *
View
Basic IPv4 ACL view
Parameters
rule-id: Basic IPv4 ACL rule number in the range 0 to 65534.
deny: Defines a deny statement to drop matched packets.
permit: Defines a permit statement to allow matched packets to pass.
fragment: Specifies that the rule applies to only IP fragments. Note that a rule defined
with the fragment keyword matches non-last IP fragments on an SA Series LPUs (line
processing units) (for example, LSQ1FP48SA) or EA Series LPUs (for example,
LSQ1GP12EA) while matching non-first IP fragments on an SC Series LPUs (for
example, LSQ1GP24SC). For detailed information about types of LPUs, refer to the
installation manual.
logging: Specifies to log matched packets.
source { sour-addr sour-wildcard | any }: Specifies a source address. The sour-addr
sour-wildcard argument specifies a source IP address in dotted decimal notation.
Setting the wildcard to a zero indicates a host address. The any keyword indicates any
source IP address.
time-range time-name: Specifies the time range in which the rule takes effect. The
time-name argument specifies a time range name with 1 to 32 characters. It is case
To Next Page
Loading...
Need help?
General
