3Com SuperStack 4 Configuration Manual page 197

You can use the following command to define the numbered Layer-2 ACL.
Perform the following configuration in corresponding view.
Table 227 Define Layer-2 ACL
Operation
Enter Layer-2 ACL view (from
System View)
Add a sub-item to the ACL
(from Layer-2 ACL View)
Delete a sub-item from the ACL
(from Layer-2 ACL View)
Delete one ACL or all the ACL
(from System View)
Activating ACL The defined ACL can be active after being activated globally on the Switch. This
function is used to activate the ACL filtering or classify the data transmitted by the
hardware of the Switch.
You can use the following command to activate the defined ACL.
Perform the following configuration in Ethernet Port View.
Table 228 Activate ACL
Operation
Activate an ACL
Deactivate an ACL undo packet-filter ip-group
Displaying and After the above configuration, execute
Debugging ACL the running of the ACL configuration, and to verify the effect of the configuration.
Execute
Table 229 Display and Debug ACL
Operation
Display the status of the time range
Display the detail information about the
ACL
Display the information about the ACL
running state
Clear ACL counters
The matched information of
the software.
For syntax description, refer to the Command Reference Manual.
Command
acl number
config | auto }
rule [
type
lsap_type type_mask
cos
source_mac_addr source_mac_wildcard
dest {
} | time-range
undo rule
undo acl { number
Command
packet-filter inbound
rule [ link-group
acl_number
link-group
link-group
command in User View to clear the statistics of the ACL module.
reset
display acl
Brief Introduction to ACL
acl_number
rule_id
] { permit | deny } [ [
protocol_type type_mask
] |
cos source_vlan_id
| source {
dest_mac_addr dest_mac_wildcard
name ]*
rule_id
acl_number
ip-group
acl_number rule
rule
[ rule
acl_number
acl_number [ rule rule
command in all views to display
display
Command
display time-range { all |
display acl { all |
display packet-filter { interface {
interface_name
|
interface_num } | unitid
reset acl counter { all |
command specifies the rules treated by
209
[ match-order {
| lsap
format_type |
|
}* |
| all }
acl_number
[ rule
rule ] ] |
] }
rule
[ rule
] }
name
}
acl_number
}
interface_type
unit_id }
acl_number
[
}