H3C s3600 series Command Manual page 732

Parameters
Parameters of the rule command
rule-id: ACL rule ID, in the range of 0 to 65534.
deny: Drops the matched packets.
permit: Permits the matched packets.
rule-string: ACL rule information, which can be a combination of the parameters described in
Table 1-6 Parameters for basic IPv4 ACL rules
Parameters
source { sour-addr
sour-wildcard | any }
fragment
time-range time-name
sour-wildcard is the complement of the wildcard mask of the source subnet mask. For example, you
need to input 0.0.255.255 to specify the subnet mask 255.255.0.0.
Parameters of the undo rule command
rule-id: Rule ID, which must the ID of an existing ACL rule. You can obtain the ID of an ACL rule by using
the display acl command.
fragment: Removes the settings concerning non-tail fragments in the ACL rule.
source: Removes the settings concerning source address in the ACL rule.
time-range: Removes the settings concerning time range in the ACL rule.
Description
Use the rule command to define an ACL rule.
Use the undo rule command to remove an ACL rule or specified settings of an ACL rule.
To remove an ACL rule using the undo rule command, you need to provide the ID of the ACL rule. If no
other arguments are specified, the entire ACL rule is removed. Otherwise, only the specified information
of the ACL rule is removed.
Note that:
Function
Specifies a source address.
Indicates that the rule applies
only to non-tail fragments.
Specifies the time range in
which the rule takes effect.
1-10
Description
The sour-addr sour-wildcard argument
specifies a source IP address in dotted
decimal notation. Setting the wildcard
to a zero indicates a host address. The
any keyword indicates any source IP
address.
––
time-name: specifies the name of the
time range in which the rule is active; a
string comprising 1 to 32 characters.
Table 1-6.