3Com 7757 Configuration Manual page 643

Configuration
Preparation
Configuration Procedure
Before configuring an ACL rule containing time range arguments, you need to
configure define the corresponding time ranges. For the configuration of time
ranges, refer to "Configuring Time Ranges" on page 640.
The values of source and destination IP addresses, the type of the protocols carried
by IP, and protocol-specific features in the rule have been defined.
Table 511 Define an advanced ACL rule
Operation
Enter system view
Create or enter advanced ACL
view
Define an rule
Display ACL information
rule-string: rule information, which can be combination of the parameters
described in Table 512. You must configure the protocol argument in the rule
information before you can configure other arguments.
Table 512 Rule information
Parameter Type
protocol Protocol type
source { sour-addr Source address
sour-wildcard | any } information
Destination address
destination { dest-ad
dr dest-wildcard | information
any }
precedence Packet precedence
precedence
Command
system-view
acl { number acl-number |
name acl-name [ advanced |
basic | link | user ] }
[ match-order { config |
auto } ]
rule [ rule-id ] { permit |
deny } rule-string
display acl config { all |
acl-number | acl-name }
Function
Type of protocol over
IP
Specifies the source
address information in
the rule
Specifies the
destination address
information in the
rule
Packet priority
Defining Advanced ACLs
Description
-
Required
By the default, the match
order is config.
Required
Optional
This command can be
executed in any view.
Description
When expressed in
numerals, the value
range is 1 to 255.
When expressed with
a name, the value can
be GRE, ICMP, IGMP,
IP, IPinIP, OSPF, TCP,
and UDP.
sour-addr
sour-wildcard is used
to specify the source
address of the packet,
expressed in dotted
decimal notation.
any represents all
source addresses.
dest-addr
dest-wildcard is used
to specify the
destination address of
the packet, expressed
in dotted decimal
notation.
any represents all
destination address.
Value range: 0 to 7
643