Access Control List - 3Com 3032 Configuration Manual

Configuring Standard

Access Control List

Configuring Extended
Access Control List
The value of the standard access control list is an integer from 1 to 99. First of all,
enter the ACL view through
the access control list, and then configure specific access rules through
command. If the matching sequence is not configured, it will be conducted by
mode.
auto
Perform the following configurations in system view and ACL view.
Table 622 Configure Standard Access Control List
Operation
Enter the ACL view and configure the
match sequence of access control list
Configure standard access list rule
Delete specific access list rule
Delete access list
means that this rule functions during normal time range, while
normal
means that this rule will function during the special time range. Users shall set the
special time segment when using
number will be matched according to "depth-first"command.
By default is adopted.
normal
The value of the extended access control list is an integer from 100 to 199. First of
all, enter the ACL view through
sequence of the access control list, and then configure specific access rules
through command. If the matching sequence is not configured, it will be
rule
conducted in mode.
auto
Perform the following configurations in system view and ACL view.
Table 623 Configure Extended Access Control List
Operation
Enter the ACL view and configure the
match sequence of access control list
Configure extended access control list rule
of TCP/UDP protocol
Configure extended access control list rule
of ICMP protocol
command, and configure the match sequence of
acl
Command
acl acl-number [ match-order config |
auto ]
rule { normal | special }{ permit |
deny } [source source-addr
source-wildcard | any ]
undo rule { rule-id | normal |
special }}
undo acl {acl-number| all }
. Multiple rules with the same serial
special
command, and configure the match
acl
Command
acl acl-number [ match-order config |
auto ]
rule { normal | special }{ permit |
deny } { tcp | udp } [source
source-addr source-wildcard | any ]
[source-port operator port1 [ port2 ]
] [ destination dest-addr dest-
wildcard | any ] [destination-port
operator port1 [ port2 ] ] [logging]
rule { normal | special }{ permit |
deny } ICMP [source
source-wildcard | any ] [ destination
dest-addr dest- wildcard | any ]
[icmp-type icmp-type icmp-code]
[logging]
Configure Firewall 555
rule
special
source-addr