Configuring Advanced Acl - 3Com 5500-EI PWR Install Manual

Configuring Advanced ACL

An advanced ACL can filter packets by their source and destination IP addresses, the
protocols carried by IP, and protocol-specific features such as TCP/UDP source and
destination ports, ICMP message type and message code.
An advanced ACL can be numbered from 3000 to 3999. Note that ACL 3998 and ACL 3999
cannot be configured because they are reserved for cluster management.
Advanced ACLs support analysis and processing of three packet priority levels: type of
service (ToS) priority, IP priority and differentiated services codepoint (DSCP).
Using advanced ACLs, you can define classification rules that are more accurate, more
abundant, and more flexible than those defined for basic ACLs.
Configuration prerequisites
To configure a time range-based advanced ACL rule, you need to create the
corresponding time ranges first. For information about of time range configuration,
refer to Configuring Time
The settings to be specified in the rule, such as source and destination IP addresses,
the protocols carried by IP, and protocol-specific features, are determined.
Configuration procedure
Follow these steps to define an advanced ACL rule:
To do...
Enter system view
Create an advanced ACL
and enter advanced ACL
view
Define an ACL rule
Assign a description string
to the ACL rule
Assign a description string
to the ACL
Note that:
With the config match order specified for the advanced ACL, you can modify any
existent rule. The unmodified part of the rule remains. With the auto match order
specified for the ACL, you cannot modify any existent rule; otherwise the system
prompts error information.
If you do not specify the rule-id argument when creating an ACL rule, the rule will be
numbered automatically. If the ACL has no rules, the rule is numbered 0; otherwise, the
Range.
Use the command...
system-view
acl number acl-number
[ match-order { auto |
config } ]
rule [ rule-id ] { permit |
deny } protocol
[ rule-string ]
rule rule-id comment text
description text
1-7
Remarks
—
Required
config by default
Required
For information about
protocol and rule-string,
refer to ACL Commands.
Optional
No description by default
Optional
No description by default