Huawei Quidway S5600 Series Operation Manual page 693

Operation Manual – ACL
Quidway S5600 Series Ethernet Switches-Release 1510
The value range for basic ACL numbers is 2,000 to 2,999.
1.3.1 Configuration Preparation
Before configuring an ACL rule containing time range arguments, you need to configure
define the corresponding time ranges. For the configuration of time ranges, refer to
Advanced ACL.
The value of the source IP address information in the rule has been defined.
1.3.2 Configuration Procedure
Table 1-2 Define a basic ACL rule
Operation
Enter
view
Create or enter
basic ACL view
Define an rule
Define
description
information of the
ACL
Display
information
In the case that you specify the rule ID when defining a rule:
If the rule corresponding to the specified rule ID already exists, you will edit the
rule, and the modified part in the rule will replace the original content, while other
parts remain unchanged.
If the rule corresponding to the specified rule ID does not exists, you will create
and define a new rule.
The content of a modified or created rule must not be identical with the content of
any existing rule; otherwise the rule modification or creation will fail, and the
system will prompt that the rule already exists.
If you do not specify a rule ID, you will create and define a new rule, and the system will
assign an ID for the rule automatically.
Command
system
system-view
acl number
[ match-order { config | auto } ]
rule [ rule-id ] { permit | deny }
[ fragment | source { sour-addr
sour-wildcard | any } | time-range
time-name ]*
the
description text
ACL
display acl { all | acl-number }
Huawei Technologies Proprietary
acl-number
1-5
Chapter 1 ACL Configuration
Description
—
By the default, the match
order is config.
Required
Optional
Optional
This command can be
executed in any view.