Rule (In Basic Ipv4 Acl View) - H3C S7500E Series Command Manual

Hide thumbs Also See for S7500E Series:

Table of Contents

Command Manual – ACL

H3C S7500E Series Ethernet Switches

Use the reset acl counter command to clear statistics about a specified or all IPv4

ACLs that are referenced by upper layer software.

# Clear statistics about IPv4 ACL 2001, which is referenced by upper layer software.

<Sysname> reset acl counter 2001

# Clear statistics about the IPv4 ACL named flow, which is referenced by upper layer

<Sysname> reset acl counter name flow

1.2.7 rule (in basic IPv4 ACL view)

rule [ rule-id ] { deny | permit } [ fragment | logging | source { sour-addr sour-wildcard

| any } | time-range time-name | vpn-instance vpn-instance-name ] *

undo rule rule-id [ fragment | logging | source | time-range | vpn-instance ] *

Basic IPv4 ACL view

rule-id: Basic IPv4 ACL rule number in the range 0 to 65534.

deny: Defines a deny statement to drop matched packets.

permit: Defines a permit statement to allow matched packets to pass.

fragment: Specifies that the rule applies to only IP fragments. Note that a rule defined

with the fragment keyword matches non-last IP fragments on an SA Series LPUs (line

processing units) (for example, LSQ1FP48SA) or EA Series LPUs (for example,

LSQ1GP12EA) while matching non-first IP fragments on an SC Series LPUs (for

example, LSQ1GP24SC). For detailed information about types of LPUs, refer to the

installation manual.

logging: Specifies to log matched packets.

source { sour-addr sour-wildcard | any }: Specifies a source address. The sour-addr

sour-wildcard argument specifies a source IP address in dotted decimal notation.

Setting the wildcard to a zero indicates a host address. The any keyword indicates any

source IP address.

time-range time-name: Specifies the time range in which the rule takes effect. The

time-name argument specifies a time range name with 1 to 32 characters. It is case

Chapter 1 ACL Configuration Commands

Table of Contents