Rule (Basic Acl) - Huawei Quidway S3900 series Command Manual

Command Manual – ACL
Quidway S3900 Series Ethernet Switches-Release 1510
rule rule: Specifies a rule of an ACL. The rule argument ranges from 0 to 65534.
If you do not specify the rule number, all the rules of an ACL are applied.
Description
Use the packet-filter command to apply ACL rules on the port to filter packets.
Use the undo packet-filter command to remove the ACL rules applied on the port.
Example
# Apply ACL 2100 on GigabitEthernet 1/1/1 to filter packets.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] interface gigabitEthernet1/1/1
[Quidway-GigabitEthernet1/1/1] packet-filter inbound ip-group 2000

1.1.7 rule (Basic ACL)

Syntax
rule [ rule-id ] { permit | deny } [ fragment ] [ source { sour-addr sour-wildcard | any } ]
[ time-range time-name ]
undo rule rule-id [ fragment ] [ source ] [ time-range ]
View
Basic ACL view
Parameter
1) Parameters of the rule command:
rule-id: ACL rule ID, in the range of 0 to 65,534.
deny: Drops packets that satisfy the condition.
permit: Permits packets that satisfy the condition to pass.
fragment: Specifies that the rule takes effect on non-initial fragment packets.
source { sour-addr sour-wildcard | any }: Specifies the source address information in
the rule. sour-addr is used to specify the source IP address of the packet, expressed in
dotted decimal notation. sour-wildcard is used to specify the wildcard mask for the
source subnet mask of the packet, expressed in dotted decimal notation. For example,
you need to input 0.0.255.255 for the subnet mask 255.255.0.0. You can set
sour-wildcard to 0 to represent the host IP address. any is used to represent any
arbitrary IP address.
time-range time-name: Specifies a time range within which the rule is valid.
2) Parameters of the undo rule command
Huawei Technologies Proprietary
1-7
Chapter 1 ACL Commands