Function Description - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
Classification
Rule
Naming mode
Table 10-2
ACLs to define rules. Advanced ACLs can define rules based on IP version information and the
type of the protocol over IP, such as Generic Routing Encapsulation (GRE), Internet Group
Management Protocol (IGMP), IPinIP, Open Shortest Path First (OSPF), Transmission Control
Protocol (TCP), User Datagram Protocol (UDP), and Internet Control Management Protocol
(ICMP).
Table 10-2 Information that can be used by different types of ACLs to define rules
Information Defined in
Layer 3
information
Issue 02 (2012-03-30)
Type
Numbered
ACL
Named
ACL
shows information that can be used by basic ACLs, advanced ACLs, and Layer 2
Basic
an ACL ACL
-
Source IP Yes
address
Destination No
IP address
DiffServ No
Codepoint
(DSCP)
Priority No
Fragment Yes
flag
Type of No
Service
(ToS)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Function
A numbered ACL is
identified by a number,
which can be specified to
reference the ACL.
A named ACL is identified
by a character string name,
which can be specified to
reference the ACL. Named
ACLs are easy to identify
and remember.
Advanced ACL
IP GRE,
IGMP,
IPinIP,
and
OSPF
Yes Yes
Yes Yes
Yes Yes
Yes Yes
Yes Yes
Yes Yes
10 ACL Configuration
Description
-
The AR1200-S supports
flexible ACL naming modes.
You can also specify a number
for a named ACL. If no ACL
number is specified for a
named ACL, the system
allocates an ACL number to
the named ACL.
TCP UDP ICMP
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
Yes Yes Yes
Layer 2
ACL
-
No
No
No
No
No
No
186