Acl Supported By Ethernet Switch - Huawei Quidway S5000 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches
The case includes: ACL cited by route policy function, ACL used for control logon user,
etc.
Note:
The depth-first principle is to put the statement specifying the smallest range of packets on the top of the
list. This can be implemented through comparing the wildcards of the addresses. The smaller the wildcard
is, the less hosts it can specify. For example, 129.102.1.1 0.0.0.0 specifies a host, while 129.102.1.1
0.0.255.255 specifies a network segment, 129.102.0.1 through 129.102.255.255. Obviously, the former
one is listed ahead in the access control list.
The specific standard is as follows.
For basic access control list statements, comparing the source address wildcards directly. If the wildcards
are same, follow the configuration sequence.
For the access control list based on the interface filter, the rule that is configured with any is listed in the
end, while others follow the configuration sequence.
For the advanced access control list, comparing the source address wildcards first. If they are the same,
then comparing the destination address wildcards. For the same destination address wildcards,
comparing the ranges of port number, the one with smaller range is listed ahead. If the port numbers are in
the same range, follow the configuration sequence.

1.1.2 ACL Supported by Ethernet Switch

For Ethernet Switch, ACLs are divided into the following categories:
Numbered basic ACL.
Named basic ACL.
Numbered advanced ACL.
Named advanced ACL.
Numbered Layer-2 ACL.
Named Layer-2 ACL.
The table below lists the limits to the numbers of different ACL on a switch.
Table 1-1 Quantitative limitation to the ACL
Numbered basic ACL.
Numbered advanced ACL.
Numbered Layer-2 ACL.
Named basic ACL.
Named advanced ACL.
Named Layer-2 ACL.
The sub items of an ACL
Maximum sub items for all ACL (sum of all ACL's sub items)
Item
1-2
Chapter 1 ACL Configuration
Value range
2000 and 2999
3000 and 3999
4000 and 4999
-
-
-
0 to 127
-