Creating An Acl; Optional) Setting The Time Range When An Acl Takes Effect - Huawei Quidway S9300 Configuration Manual

8 ACL Configuration
No.
1
2
3
4
5

8.3.2 Creating an ACL

Context
An ACL consists of a series of rules defined by multiple permit or deny clauses. You need to
create an ACL before configuring the rules of the ACL.
To create an ACL, you need to:
l
l
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
acl [ number ] acl-number
An ACL is created.
l
l
l
----End

8.3.3 (Optional) Setting the Time Range When an ACL Takes Effect

8-4
Data
Name of the time range when the ACL takes effect, start time, and end time
Number of the ACL
Number of ACL rule and the rule that identifies the type of packets, including
protocol, source address, source port, destination address, destination port, the type
and code of Internet Control Message Protocol (ICMP), IP precedence, and Type of
Service (ToS) value
Description of the ACL
Step of the ACL
Specify the number of the ACL. For example, the ACL with the number ranging from 2000
to 2999 is a basic ACL, and the ACL with the number ranging from 3000 to 3999 is an
advanced ACL.
Set the match order of the ACL rules. This parameter is optional. By default, the match-
order is config.
To create a basic ACL, you can set the value of acl-number ranging from 2000 to 2999.
To create an advanced ACL, you can set the value of acl-number ranging from 3000 to 3999.
To create a frame header-based ACL, you can set the value of acl-number ranging from 4000
to 4999.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 01 (2009-07-28)