Operation Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches Chapter 1 ACL Configuration
Huawei Technologies Proprietary
1-16
 Note:
When user defines user-defined ACL, please calculate and set the correct offsets
according to the data frames of SNAP+tag format with the 802.3 standard described
above.
You can use the following commands to define user-defined ACL.
Perform the following configuration in corresponding view.
Table 1-16 Defining the user-defined ACL
Operation Command
Enter user-defined ACL view(from
system view)
acl { number acl-number | name
acl-name user } [ match-order { config
| auto } ]
Add a sub-item to the ACL(from
user-defined ACL view)
rule [ rule-id ] { permit | deny }
{ rule-string rule-mask offset }&<1-8>
[ time-range name ]
Delete a sub-item from the ACL(from
user-defined ACL view)
undo rule rule-id
Delete one ACL or all the ACL(from
system view)
undo acl { number acl-number | name
acl-name | all }
The self-defined ACL are identified with the numbers ranging from 5000 to 5999.
1.3.3 Activating ACL
The defined ACL can be active after activated globally on the switch. This function is
used to activate the ACL filtering or classify the data transmitted by the hardware of
switch.
You can use the following command to activate the defined ACL.
Perform the following configuration in system view.
Table 1-17 Activating ACL
Operation Command
Activate an
ACL
packet-filter { user-group { acl-number | acl-name } [ rule rule ] |
{ ip-group { acl-number | acl-name } [ rule rule ] | link-group
{ acl-number | acl-name } [ rule rule ] }* }
Deactivate an
ACL
undo packet-filter { user-group { acl-number | acl-name } [ rule
rule ] | { ip-group { acl-number | acl-name } [ rule rule ] | link-group
{ acl-number | acl-name } [ rule rule ] }* }