Configuring An Ipv4 Advanced Acl - HP FlexNetwork MSR Series Configuration Manuals

Configuring an IPv4 advanced ACL

IPv4 advanced ACLs match packets based on the following criteria:
•
Source IP addresses.
•
Destination IP addresses.
•
Packet priorities.
•
Protocol numbers.
•
Other protocol header information, such as TCP/UDP source and destination port numbers,
TCP flags, ICMP message types, and ICMP message codes.
Compared to IPv4 basic ACLs, IPv4 advanced ACLs allow more flexible and accurate filtering.
To configure an IPv4 advanced ACL:
Step
1. Enter system view.
2. Create an IPv4 advanced
ACL and enter its view.
3. (Optional.)
description
advanced ACL.
4. (Optional.)
numbering step.
Command
system-view
acl advanced { acl-number |
name acl-name } [ match-order
{ auto | config } ]
Configure a
for the IPv4
description text
Set the rule
step step-value
11
Remarks
N/A
By default, no ACLs exist.
The value range for a numbered
IPv4 advanced ACL is 3000 to
3999.
Use the acl advanced
acl-number command to enter the
view of a numbered
advanced ACL.
Use the acl advanced name
acl-name command to enter the
view of a named IPv4 advanced
ACL.
By default, an IPv4 advanced
ACL does not have a description.
The default setting is 5.
IPv4