Huawei Quidway S8500 Series Command Manual page 641

Command Manual – QoS/ACL
Quidway S8500 Series Routing Switches
range of the destination MAC addresses in which the user is interested. The smaller the
wildcard, the smaller the range of the MAC address. For example, 00e0-fc01-0101
0-0-0 specifies a MAC address: 00e0-fc01-0101, but 00e0-fc01-0101-0-0-fff specifies
an address range: 00e0-fc01-0000 to 00e0-fc01-ffff. any represents all packets
transferred at all the ports.
s-tag-vlanid s-tag-vlanid: VLAN ID in the most exterior 802.1QTag carried by the
specified packets.
Description
Use the rule command to add a rule to the ACL.
Use the undo rule command to delete a rule from the ACL.
You can define multiple rules for an ACL. Only the specified rules will be deleted if you
select parameters in the undo rule command.
If you redefine an existing rule, the newly configured option automatically overwrites
the corresponding option of the original rule, and the option not being redefined
remains. For example:
With the original rule 0:
[acl number 2000]rule 0 permit source 10.1.1.1 0 time-range Huawei
when redefine it as follows:
[acl number 2000]rule 0 permit source 10.1.1.2 0 fragment
it becomes:
rule 0 permit source 10.1.1.2 0 fragment time-range Huawei
That is, the source option is replaced with 10.1.1.2, the fragment option which the
original rule does not contain is added, and the time-range Huawei option which the
original rule contains is reserved.
Caution:
If you want to replace an existing rule, you are recommended to use the undo
command to delete the original rule fist, and then reconfigure the rule. This makes
sure the unwanted options are completely removed.
If you configure a rule without providing the rule number, the system will
automatically generate a new rule if the rule is not identical to any existing rules.
The rule with the specified bt-flag cannot be used in the traffic-redirect command.
Related command: acl.
Huawei Technologies Proprietary
1-17
Chapter 1 ACL Commands