Displaying And Debugging Acl Configurations - 3Com 8800 Configuration Manual

3Com Switch 8800 Configuration Guide
32.2.4 Activating ACL
After defining an ACL, you must activate it. This configuration activates those ACLs to
filter or classify the packets forwarded by hardware.
For interface cards, perform the following configurations in Ethernet port view or port
group view.
Table 32-11 Activate ACL
Operation
Activate IP group ACL
Deactivate IP group ACL
Activate IP group ACL
and link group ACL at
same time
Deactivate IP group ACL
and link group ACL at
same time
Activate link group ACL
Deactivate
ACL
system-index index here is the system index for an ACL rule. When delivering a rule,
the system assigns an index to it, for convenience of later retrieval. You can also assign
a system index for it when activating an ACL rule with this command. However, you are
not recommended to assign a system index if not urgently necessary.

32.3 Displaying and Debugging ACL Configurations

After these configurations are completed, you can use the display command in any
view to view ACL running to check configuration result. You can clear ACL statistics
using the display command in user view.
Table 32-12 Display and debug ACL configurations
Display time range configuration
packet-filter inbound ip-group { acl-number |
acl-name } [ rule rule [ system-index index ] ]
undo packet-filter inbound ip-group { acl-number |
acl-name } [ rule rule ]
packet-filter inbound ip-group { acl-number |
acl-name } { rule rule link-group { acl-number |
acl-name } [ rule rule [ system-index index ] ] |
link-group { acl-number | acl-name } rule rule }
undo packet-filter inbound ip-group { acl-number |
acl-name } { rule rule link-group { acl-number |
acl-name } [ rule rule ] | link-group { acl-number |
acl-name } rule rule }
packet-filter inbound link-group { acl-number |
acl-name } [ rule rule [ system-index index ] ]
link group undo packet-filter inbound link-group { acl-number |
acl-name } [ rule rule ]
Operation
32-10
Chapter 32 ACL Configuration
Command
Command
display time-range { all | name }