Rule Comment - H3C s3100 series Command Manual

Hide thumbs Also See for s3100 series:
Table of Contents

Advertisement

If you do not specify the rule-id argument when creating an ACL rule, the rule will be numbered
automatically. If the ACL has no rules, the rule is numbered 0; otherwise, the number of the rule will
be the greatest rule number plus one. If the current greatest rule number is 65534, however, the
system will display an error message and you need to specify a number for the rule.
The content of a modified or created rule cannot be identical with that of any existing rule of the
ACL; otherwise the rule modification or creation will fail, and the system will prompt that the rule
already exists.
To specify the src-port or dest-port keyword for a rule, you need to specify the ip-protocol
rule-string rule-mask combination as TCP or UDP, that is, 0x06 or 0x11. To specify the
icmpv6-type or icmpv6-code keyword for a rule, you need to specify the ip-protocol rule-string
rule-mask combination as ICMPv6, that is, 0x3a.
Note the following when assigning an IPv6 ACL to the hardware on S3100-EI Series Ethernet switches:
IPv6 ACLs do not match IPv6 packets with extension headers.
Do not use IPv6 ACLs with VLAN mapping and trusted port priority.
Example
# Configure an rule for IPv6 ACL 5000, denying packets sent from 3001::1/64 to 3002::1/64.
<Sysname> system-view
[Sysname] acl number 5000
[Sysname-acl-user-5000] rule deny src-ip 3001::1 64 dest-ip 3002::1 64

rule comment

Syntax
rule rule-id comment text
undo rule rule-id comment
View
Advanced ACL view, Layer 2 ACL view, IPv6 ACL view
Parameters
rule-id: ID of the ACL rule, in the range of 0 to 65534.
text: Comment for the ACL rule, a string of 1 to 127 characters. Blank spaces and special characters are
acceptable.
Description
Use the rule comment command to define a comment for the ACL rule.
Use the undo rule comment command to remove the comment defined for the ACL rule.
You can give rules comments to provide relevant information such as their application purposes and the
ports they are applied to, so that you can easily identity and distinguish ACL rules by their comments.
1-23

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents