H3C s3100 series Command Manual page 579

Hide thumbs Also See for s3100 series:
Table of Contents

Advertisement

destination: Removes the settings concerning the destination address in the ACL rule.
destination-port: Removes the settings concerning the destination port in the ACL rule. This keyword
is only available to the ACL rules with their protocol types set to TCP or UDP.
icmp-type: Removes the settings concerning the ICMP type and message code in the ACL rule. This
keyword is only available to the ACL rules with their protocol type set to ICMP.
precedence: Removes the precedence-related settings in the ACL rule.
tos: Removes the ToS-related settings in the ACL rule.
dscp: Removes the DSCP-related settings in the ACL rule.
ttl: Removes the TTL-related settings in the ACL rule.
time-range: Removes the time range settings in the ACL rule.
fragment: Removes the settings concerning non-tail fragments in the ACL rule.
Note the following when assigning an advanced ACL to the hardware:
The fragment keywords are not supported.
When you specify the ttl keyword, the ttl argument can only be set to 0, 1 or 255.
When defining the source or destination port information, operator (in
When defining the source or destination port information, you can specify up to four port ranges
with the range operator.
Description
Use the rule command to define an ACL rule.
Use the undo rule command to remove an ACL rule or specified settings of an ACL rule.
To remove an ACL rule using the undo rule command, you need to provide the ID of the ACL rule. If no
other arguments are specified, the entire ACL rule is removed. Otherwise, only the specified information
of the ACL rule is removed.
Note that:
With the config match order specified for the advanced ACL, you can modify any existent rule. The
unmodified part of the rule remains. With the auto match order specified for the ACL, you cannot
modify any existent rule; otherwise the system prompts error information.
If you do not specify the rule-id argument when creating an ACL rule, the rule will be numbered
automatically. If the ACL has no rules, the rule is numbered 0; otherwise, the number of the rule will
be the greatest rule number plus one. If the current greatest rule number is 65534, however, the
system will display an error message and you need to specify a number for the rule.
The content of a modified or created rule cannot be identical with that of any existing rules;
otherwise the rule modification or creation will fail, and the system will prompt that the rule already
exists.
If the ACL is created with the auto keyword specified, the newly created rules will be inserted in the
existent ones by depth-first principle, but the numbers of the existent rules are unaltered.
1-18
Table
1-11) can not be "neq".

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents