Operation Manual – ACL
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1
ACL Configuration
Huawei Technologies Proprietary
1-13
Operation Command Description
Create or enter
layer 2 ACL view
acl number acl-number
Required
Define an rule
rule [ rule-id ] { permit |
deny } rule-string
Required
Define the
comment string of
the ACL rule
rule rule-id comment text
Optional
Define the
description
information of the
ACL
description text
Optional
Display ACL
information
display acl { all |
acl-number }
Optional
This command can be
executed in any view.
In the case that you specify the rule ID when defining a rule:
z If the rule corresponding to the specified rule ID already exists, you will edit the
rule, and the modified part in the rule will replace the original content, while other
parts remain unchanged.
z If the rule corresponding to the specified rule ID does not exists, you will create
and define a new rule.
z The content of a modified or created rule must not be identical with the content of
any existing rule; otherwise the rule modification or creation will fail, and the
system will prompt that the rule already exists.
If you do not specify a rule ID, you will create and define a new rule, and the system will
assign an ID for the rule automatically.
rule-string: rule information, which can be combination of the parameters described in
Table 1-12.
Table 1-12 Rule information
Parameter Type Function Description
format-type
Link layer
encapsulation
type
Defines the
link layer
encapsulation
type in the
rule
format-type: the value can be
802.3/802.2, 802.3, ether_ii,
or snap.