Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-4
Note:
1) If a specific time rang is not defined, the ACL will always function after activated.
2) During the process of defining the ACL, you can use the rule command for several times to define
multiple rules for an ACL.
3) If ACL is used for filter or classify the data transmitted by the hardware of switch, the match order
defined in the acl command will not be effective. If ACL is used for filter or classify the data treated by the
software of switch, the match order of ACL’s sub-rules will be effective. Besides, once the user specifies
the match-order of an ACL rule, he cannot modify it later.
4) The default matching-order of ACL is config, i.e. following the order as that configured by the user.
I. Define basic ACL
The rules of the basic ACL are defined on the basis of the Layer-3 source IP address to
analyze the data packets.
You can use the following command to define basic ACL.
Perform the following configuration in corresponding view.
Table 1-3 Define basic ACL
Operation Command
Enter basic ACL view(from system view)
acl { number acl-number | name acl-name basic }
[ match-order { config | auto } ]
add a sub-item to the ACL(from basic ACL view)
rule [ rule-id ] { permit | deny } [ source source-addr
wildcard | any ] [ fragment ] [ time-range name ]
delete a sub-item from the ACL(from basic ACL view) undo rule rule-id [ source ] [ fragment ] [ time-range ]
Delete one ACL or all the ACL(from system view) undo acl { number acl-number | name acl-name | all }
II. Define advanced ACL
The rules of the classification for advanced ACL are defined on the basis of the
attributes such as source and destination IP address, the TCP or UDP port number in
use and packet priority to process the data packets. The advanced ACL supports the
analyses of three kinds of packet priorities, ToS (Type of Service), IP and DSCP
priorities.
You can use the following command to define advanced ACL.
Perform the following configuration in corresponding view.
To Next Page
Loading...
Need help?
General