ZXR102900ESeriesCongurationGuide
CommandFunction
zte(cfg)#configingress-acluser-defineudb<1-15>description
<string>
Setsadescriptionfora
user-denedbyte.
zte(cfg)#clearacludb<1-15>description
Clearsthedescriptionofa
user-denedbyte.
move<1-500>{after|before}<1-500>(allACLconguration
modes)
SortsrulesinACLinstance.
clearrule<1-500>(allACLcongurationmodes)ClearsoneruleinACLinstance.
zte(cfg)#showvlan-range<vlan-range>Displaysthebestmask
congurationwhenVLANID
ismatchedinbatch.
zte(cfg)#showaclbinding{all|port[<portlist>]|vlan[<vlanlist>]}Displaystheconguration
informationthatACLisboundto
theinterface.
zte(cfg)#showaclconfigDisplaysACLsummary
conguration.
zte(cfg)#showaclconfig[<1-828>|name<word>][active|
command|deny|passive|permit|policy|rule<1-500>|snmp
|time-range]
Displaysthedetailedconguration
ofACLinstance.
zte(cfg)#showacludbDisplaysdetailedcongurationsof
user-denedbytes.
zte(cfg)#createacl<1-828>description<description>SetsACLdescriptions.
zte(cfg)#clearacl<1-828>descriptionDeletesACLdescriptions.
ACLCongurationInstance
lCongurationDescription
CongureACLintheswitchtorealizethefollowingfunctions.Forbidtheusersto
accesstheexternalnetworkthroughthegatewayfrom9:00to18:00.Thegateway
connectswiththeswitchonport26.TheclientPCconnectstheswitchonports1-24.
Alltheusersaccesstheexternalnetworkthroughthegateway192.168.0.1.See
Figure5-12.
5-52
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential