Packet-Filter - 3Com 5500G-EI Command Reference Manual

Note that the system has a delay of about 1 minute when updating the ACL state,
while the
when
may not have been activated yet.
For the related configuration, see the
Example
Display all the time ranges.
<SW5500>display time-range all
Current time is 14:36:36 Apr/1/2000 Thursday
Time-range : hhy ( Inactive )
from 08:30 2-5-2005 to 18:00 2-19-2005
Time-range : hhy1 ( Inactive )
from 08:30 2-5-2003 to 18:00 2-19-2003

packet-filter

Syntax
packet-filter inbound { ip-group
acl-number
undo packet-filter
link-group acl-number
rule ] }
View
Ethernet Port View.
Parameter
inbound:
ip-group
ACLs.
to 3999.
link-group
ACL number, ranging from 4000 to 4999.
rule
specified, all subitems of the ACL will be activated. An ACL can have many rules.
They start at 0.
Description
Use the
Use the
interface.
Example
Activate ACL 2000 for inbound traffic on interface Ethernet 1/0/1.
<SW5500>system-view
display time-range
display time-range
rule
rule ] ] | link-group
inbound { ip-group acl-number [ rule rule [
rule rule ] ] | link-group acl-number [ rule
Filters the traffic received by the Ethernet port.
Activates the IP ACLs, including basic and advanced
acl-number
:
specifies the sequence number of the ACL, ranging from 2000
a cl-number
Activates the Layer 2 ACLs.
acl-number
:
Specifies the rule of an ACL, ranging from 0 to 65534; if not
rule
:
command to activate the ACL on a specific interface.
packet-filter
undo packet-filter
ACL Configuration Command List
command applies the current time. Therefore
displays that a time range is active, the ACL using it
command.
time-range
acl-number
acl-number
command to disable the ACL on a specific
rule
[ rule [ link-group
rule
[ rule ] }
specifies the
acl-number
285