H3C S6550X-HI Series Command Reference Manual page 2126

match-order
: Compares ACL rules in depth-first order.
auto
: Compares ACL rules in ascending order of rule ID. The rule with a smaller ID has a higher
config
priority. If you do not specify a match order, the
for the user-defined ACL can only be
: Specifies all ACLs of the specified type.
all
Usage guidelines
If you create a numbered ACL, you can enter the view of the ACL by using either of the following
commands:
•
The
acl [ ipv6 ] number acl-number
•
The
acl { [ ipv6 ] { advanced | basic } | mac | user-defined } acl-number
command.
If you create a named ACL by using the
command, you can enter the view of the ACL by using either of the following commands:
•
acl [ ipv6 ] number acl-number [ name acl-name ]
•
acl { [ ipv6 ] { advanced | basic } | mac | user-defined } acl-number
•
acl { [ ipv6 ] { advanced | basic } | mac | user-defined } name acl-name
If you create a named ACL by using the
user-defined } name acl-name
the command that is used to create the ACL.
You can change the match order only for ACLs that do not contain any rules.
Examples
# Create IPv4 basic ACL 2000 and enter its view.
<Sysname> system-view
[Sysname] acl basic 2000
[Sysname-acl-ipv4-basic-2000]
# Create IPv4 basic ACL flow and enter its view.
<Sysname> system-view
[Sysname] acl basic name flow
[Sysname-acl-ipv4-basic-flow]
# Create IPv4 advanced ACL 3000 and enter its view.
<Sysname> system-view
[Sysname] acl advanced 3000
[Sysname-acl-ipv4-adv-3000]
# Create IPv6 basic ACL 2000 and enter its view.
<Sysname> system-view
[Sysname] acl ipv6 basic 2000
[Sysname-acl-ipv6-basic-2000]
# Create IPv6 basic ACL flow and enter its view.
<Sysname> system-view
[Sysname] acl ipv6 basic name flow
[Sysname-acl-ipv6-basic-flow]
# Create IPv6 advanced ACL abc and enter its view.
<Sysname> system-view
: Specifies the order in which ACL rules are compared against packets.
order applies by default. The match order
config
.
config
command.
acl [ ipv6 ] number acl-number name acl-name
acl { [ ipv6 ] { advanced | basic } | mac |
command, you can enter the view of the ACL by using only
2
.
.
.