Huawei AR1200-S - Creating an Advanced ACL

Follow-up Procedure
Reference the time range in an advanced ACL rule.
10.4.3 Creating an Advanced ACL
Before using an advanced ACL, ensure that the advanced ACL has been created. You can create
a named or numbered advanced ACL.
Prerequisites
The display acl all command has been executed to view all the configured ACLs. This prevents
duplicate advanced ACLs from being configured.
Procedure
l Creating a numbered advanced ACL
1. Run:
system-view
The system view is displayed.
2. Run:
acl [ number ] acl-number [ match-order { auto | config } ]
An advanced ACL with the specified number is created and the advanced ACL view
is displayed.
acl-number specifies the number of an advanced ACL. The value ranges from 3000
to 3999.
match-order specifies the matching order of advanced ACL rules:
– auto: indicates that ACL rules are matched based on the depth first principle.
– config: indicates that ACL rules are matched based on the sequence in which they
were configured.
3. (Optional) Run:
description text
The description of the advanced ACL is configured.
The description of an ACL describes the function or usage of the ACL. It is used to
differentiate ACLs.
By default, no description is configured for an ACL.
l Creating an advanced ACL based on the name
1. Run:
system-view
The system view is displayed.
2. Run:
acl name acl-name [ advance | acl-number ] [ match-order { auto |
config } ]
An advanced ACL with the specified name is created and the advanced ACL view is
displayed.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 10 ACL Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
197