Displaying Acl Configuration - Huawei Quidway S5600 Series Operation Manual

Operation Manual – ACL
Quidway S5600 Series Ethernet Switches-Release 1510
Table 1-15 Apply combination of ACLs
Apply all the rules in an IP type ACL
separately
Apply one rule in an IP type ACL separately
Apply all the rules in a Link type ACL
separately
Apply one rule in a Link type ACL
separately
Apply all the rules in a user-defined ACL
separately
Apply one rule in a user-defined ACL
separately
Apply one rule in an IP type ACL and one
rule in a Link type ACL simultaneously
Note:
For the user-defined ACL rules, if you set to match the fields after the VLAN tag, two
VLAN tags are added for matching of either tagged or untagged packets. For the
packets with their type filed as 0800, the offset value should be 20.
1.7.3 Configuration Example
# Apply ACL 2100 in the inbound direction on GigabitEthernet 1/0/1 to filter packets.
<Quidway> system-view
[Quidway] interface gigabitethernet 1/0/1
[Quidway-GigabitEthernet1/0/1] packet-filter inbound ip-group 2100

1.8 Displaying ACL Configuration

After the above configuration, you can execute the display commands in any view to
view the ACL running information, so as to verify the configuration result.
Combination mode
Huawei Technologies Proprietary
ip-group acl-number
ip-group acl-number rule rule
link-group acl-number
link-group acl-number rule rule
user-group acl-number
user-group acl-number rule rule
ip-group
link-group acl-number rule rule
1-17
Chapter 1 ACL Configuration
Form of acl-rule
acl-number rule rule