Troubleshooting Flowchart; Solution - H3C S6805 Series Troubleshooting Manual

Troubleshooting flowchart

Figure 3 Troubleshooting ACL failure to take effect
No
ACL rules overlap?
Actions of overlapping
ACL rules conflict?
Contact the support

Solution

1. Verify that the ACL rules are defined correctly.
Execute the display acl command to view the ACL settings, including the rules and the match
order of the rules. Determine whether rules are configured correctly for packet match and
whether packets are not matched because of the incorrect match order of the rules.
For example, if you configure the following ACL rules:
ACL number 3100
rule 0 permit ip source 2.2.2.2 0.0.255.255
rule 1 deny ip destination 3.3.3.3 0.0.255.255
Packets with source IP 2.2.2.2 and destination IP 3.3.3.3 will match only rule 0 and do not
match rule 1.
For information about the rule match order, see ACL configuration in the ACL and QoS
configuration guide for the switch.
2. Check the applied ACLs for overlapping rules:
a. Use the following commands to display applied ACLs:
−
−
ACLs fail to take
effect
ACL rules defined
correctly?
Yes
Yes
No
display packet-filter
display qos policy user-defined
No
Revise ACL
rules
Yes
Remove the
conflicts
12
Yes
Resolved
No
Yes
Resolved
No
End