Configuring An Acl - Huawei S9700 Series Configuration Manual

S9700 Core Routing Switch
Configuration Guide - SPU
l Run:
By default, the action is forward.
----End

6.4.9 Configuring an ACL

This section describes how to configure an ACL to identify the traffic of various services.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
acl [
An ACL is created and the ACL view is displayed.
In server load balancing, the value of number ranges from 3000 to 3999. That is, advanced ACLs
are used.
A Layer 3 classifier can be bound to only one ACL. If the ACL is configured repeatedly, the
latest ACL takes effect.
By default, no ACL is created.
Step 3 (Optional) Run:
step step-value
The step between ACL rule IDs is set.
By default, the step between ACL rule IDs is 5.
Step 4 Run the following command as required:
l When the parameter protocol is specified as the Internet Control Message Protocol (ICMP),
l When the parameter protocol is specified as the Transmission Control Protocol (TCP) or the
Issue 01 (2012-03-15)
The action is set to load balance.
stickygroup stickygroup-name
The action is set to the sticky operation.
number ] [ match-order {
the command format is as follows:
– rule [ rule-id ] { deny | permit } icmp [ destination { destination-address destination-
wildcard | any } | dscp dscp | fragment | icmp-type { icmp-name | icmp-type icmp-
code } | precedence precedence | source { source-address source-wildcard | any } | time-
range time-name | tos tos ]
– undo rule rule-id
User Datagram Protocol (UDP), the command format is as follows:
– rule [ rule-id ] { deny | permit } { tcp | udp } [ destination { destination-address
destination-wildcard | any } | destination-port { eq | gt | lt | range } port | dscp dscp |
fragment | precedence precedence | source { source-address source-wildcard | any } |
source-port { eq | gt | lt | range } port | time-range time-name | tos tos ]
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
config | auto } ]
*
6 Load Balancing Configuration
*
220