Operation Manual – ACL
Quidway S3100 Series Ethernet Switches Chapter 1
ACL Configuration
Huawei Technologies Proprietary
1-5
Advanced ACL enables packets to be processed according to three kinds of packet
priorities: ToS (type of service), IP and DSCP (differentiated services codepoint
priority).
With advanced ACL, you can define rules which are more accurate, redundant, and
flexible than that of the basic ACL.
Table 1-4 Create an advanced ACL
Operation Command Description
Enter system view
system-view
—
Create an
advanced ACL
acl number acl-number
[ match-order { config |
auto } ]
By default, the matching order
is config, that is, ACL rules
are matched in the order they
are created.
Define a rule
rule [ rule-id ] { permit |
deny } rule-string
Required
Specify the
comment for the
rule
rule rule-id comment text
Optional
Specify ACL
description
description text
Optional
Display ACL
information
display acl { all |
acl-number }
You can execute the display
command in any view.
The rule-string argument in the above table can be a combination of the parameters
listed in
Table 1-5.
Table 1-5 Rule information
Parameter Type Function Description
protocol
Protocol
type
Specifies the
type of the
protocol carried
by IP.
This argument can be an
integer ranging from 1 to 255
(when you use a number to
identify a protocol) or one of
the following: GRE, ICMP,
IGMP, IP, IPinIP, OSPF,
TCP, or UDP.