3Com 4500 PWR 26-Port Configuration Manual page 524

[Sysname-acl-ethernetframe-4000] display acl 4000
Ethernet frame ACL
Acl's step is 1
rule 0 d eny cos e
f fff-ffff-ffff
Config uring User-defined CL
A user-defined ACL filters packets by comparing specific bytes in packet headers with specified string.
A user-defined ACL can be n
Configuration prerequisites
T o configure a time range-based
r anges first . For information
Configuration procedure
Follow these steps to define a user-defined ACL rule:
To do...
Enter system view
Create a user-defined
ACL and enter
user-def ined ACL view
D fine an ACL rule e
Define a comment for the
ACL rule
Define a description for
the ACL
Whe n configuring a rule that matches specific fields of packets, take the following two items into
acc unt: o
If VLAN-VPN is not enabled, each packet in the switch carries one VLAN tag, which is 4 bytes long.
If VLAN- VPN is enabled on a port, each packet in the switch carries two VLAN tags, which is 8
bytes long.
Note that:
You can modify any existent rule of a user-defined ACL. If you modify only the time range and/or
action, the unmodified
offset combinations, howe
4000, 1 rule
xcellent-effort source 000d-88f5-97ed ffff-ffff-ffff dest 0011-4301-991e
A
umbered from 5000 to 5999.
user-defined ACL rule, you need to define the corresponding time
about time range configurat
Use the command...
system-view
acl number acl-number
rule [ rule-id ] { permit | deny }
[ rule-string rule-mask offset ] &<1-8>
[ time-range time-name ]
rule rule-id comment text
description text
parts of the rule remain the same. If you modify the rule-string rule-mask
ver, the new combinations will replace all of the original ones.
ion, refer to C
44-9
onfiguring Time Range.
Remarks
—
Required
Required
For information about
rule-string, refer to ACL
Commands.
Optional
No description by default
Optional
No description by default