H3C S9500 Series Operation Manual page 1093

Operation Manual – QoS
H3C S9500 Series Routing Switches
7.2 Global ACL Configuration
Follow these steps to configure global ACL:
Enter system view
Create an ACL and enter
its view
Define an ACL rule
Return to system view
Define a flow template
Apply the user-defined
flow template on a board
globally
Configure the maximum
number of global ACL
entries allowed on a
D-type board
Apply an ACL/ACL rule
globally for packet filtering
Apply an ACL/ACL rule
globally for traffic policing
Display global ACL
configuration
To do...
system-view
acl { number acl-number | name
acl-name [ advanced | basic |
link ] } [ match-order { config |
auto } ]
rule
quit
flow-template user-defined slot
slot-id template-info
flow-template user-defined
global slot slot-id
global-acl maximum
max-entry-num slot slot-id
packet-filter inbound ip-group
{ acl-number | acl-name } [ rule rule
[ system-index index ] ] slot slot-id
traffic-limit inbound ip-group
{ acl-number | acl-name } [ rule rule
[ system-index index ] ] [ tc-index
index ] cir cbs ebs [ pir ] [ conform
{ { remark-cos |
remark-drop-priority } * |
remark-policed-service } ]
[ exceed { forward | drop } ] slot
slot-id
display acl global slot slot-id
Chapter 7 Global ACL Configuration
Use the command...
7-2
Remarks
—
—
Required
—
Optional
Optional
Optional
1024 by default
Optional
Optional
Available in any
view