H3C S7500E Series Command Manual

Command Manual – ACL
H3C S7500E Series Ethernet Switches Chapter 1 ACL Configuration Commands
1-14
1.2.8 rule (in advanced IPv4 ACL view)
Syntax
rule [ rule-id ] { deny | permit } protocol [ destination { dest-addr dest-wildcard | any }
| destination-port operator port1 [ port2 ] | dscp dscp | established | fragment |
icmp-type { icmp-type icmp-code | icmp-message } | logging | precedence
precedence | reflective | source { sour-addr sour-wildcard | any } | source-port
operator port1 [ port2 ] | time-range time-name | tos tos | vpn-instance
vpn-instance-name ] *
undo rule rule-id [ destination | destination-port | dscp | established | fragment |
icmp-type | logging | precedence | reflective | source | source-port | time-range |
tos | vpn-instance ] *
View
Advanced IPv4 ACL view
Parameters
rule-id: Advanced IPv4 ACL rule number in the range 0 to 65534.
deny: Defines a deny statement to drop matched packets.
permit: Defines a permit statement to allow matched packets to pass.
protocol: Protocol carried by IP. It can be a number in the range 0 to 255, or in words,
gre (47), icmp (1), igmp (2), ip, ipinip (4), ospf (89), tcp (6), udp (17).
Table 1-4 Parameters for advanced IPv4 ACL rules
Parameters Function Description
source { sour-addr
sour-wildcard |
any }
Specifies a source
address.
The sour-addr sour-wildcard argument
specifies a source IP address in dotted
decimal notation. Setting the wildcard to
a zero indicates a host address. The any
keyword indicates any source IP
address.
destination
{ dest-addr
dest-wildcard |
any }
Specifies a
destination
address.
The dest-addr dest-wildcard argument
specifies a destination IP address in
dotted decimal notation. Setting the
dest-wildcard to a zero indicates a host
address. The any keyword indicates any
destination IP address.
precedence
precedence
Specifies an IP
precedence
value.
The precedence argument can be a
number in the range 0 to 7, or in words,
routine(0), priority(1), immediate(2),
flash(3), flash-override(4), critical(5),
internet(6), or network(7).

H3C S7500E Series Specifications

General

Brand	H3C
Model	S7500E Series
Category	Switch
Language	English