Acl Configuration Commands; Acl - H3C s3600 series Command Manual

1

ACL Configuration Commands

The command used to apply ACL rules to a VLAN is newly added, which is described in
packet-filter
The command used to configure VLAN information for Layer 2 ACLs is newly added, which is
described in
ACL Configuration Commands

acl

Syntax
acl number acl-number [ match-order { auto | config } ]
undo acl { all | number acl-number }
View
System view
Parameters
all: Specifies to remove all access control lists (ACLs).
number acl-number: Specifies the number of an existing ACL or an ACL to be defined. ACL number
identifies the type of an ACL as follows.
An ACL number in the range 2000 to 2999 identifies a basic ACL.
An ACL number in the range 3000 to 3999 identifies an advanced ACL. Note that 3998 and 3999
cannot be configured because they are reserved for cluster management.
An ACL number in the range 4000 to 4999 identifies a layer 2 ACL.
An ACL number in the range 5000 to 5999 identifies a user-defined ACL.
match-order: Specifies the match order for ACL rules. Following two match orders exist.
auto: Specifies to match ACL rules according to the depth-first rule.
config: Specifies to match ACL rules in the order they are defined.
Note that the match-order keyword is not available to Layer 2 ACLs or user-defined ACLs. The match
order for layer 2 ACLs or user defined ACLs can only be config. For details about the two match orders,
refer to the relevant description in ACL Operation.
vlan.
rule (for Layer 2 ACLs).
1-1