Huawei AR1200-S Configuration Manual page 201

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
Information Defined in
Layer 4
information
Layer 2
information
Other
information
Other ACL Features Supported by the AR1200-S
The AR1200-S supports the following ACL features:
l
l
l
l
Issue 02 (2012-03-30)
an ACL
ICMP
packet type
and code
Source port
number
Destination
port number
SYN flag
type
Source
MAC
address
Destination
MAC
address
Layer 2
protocol
type
VLAN ID
802.1p
priority
Time range
Step: The step value makes it possible to add a new rule between existing rules and to
control the matching order of rules.
Description of an ACL: The description of an ACL describes the function or usage of the
ACL. It is used to differentiate ACLs.
Description of an ACL rule: The description of an ACL rule describes the function or usage
of the ACL rule. It is used to differentiate ACL rules.
Time range: A time range defines the period during which ACL rules take effect. Some
services or functions that reference ACLs need to be started during a specified period of
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Basic Advanced ACL
ACL
- IP GRE,
IGMP,
IPinIP,
and
OSPF
No No No
No No No
No No No
No No No
No No No
No No No
No No No
No No No
No No No
Yes Yes Yes
10 ACL Configuration
TCP UDP ICMP
No No Yes
Yes Yes No
Yes Yes No
Yes No No
No No No
No No No
No No No
No No No
No No No
Yes Yes Yes
Layer 2
ACL
-
No
No
No
No
Yes
Yes
Yes
Yes
Yes
Yes
187