Rule (In Advanced Ipv4 Acl View) - H3C S7500E Series Command Manual

Command Manual – ACL
H3C S7500E Series Ethernet Switches

1.2.8 rule (in advanced IPv4 ACL view)

Syntax
rule [ rule-id ] { deny | permit } protocol [ destination { dest-addr dest-wildcard | any }
| destination-port operator port1 [ port2 ] | dscp dscp | established | fragment |
icmp-type { icmp-type icmp-code | icmp-message } | logging | precedence
precedence | reflective | source { sour-addr sour-wildcard | any } | source-port
operator port1 [ port2 ] | time-range time-name | tos tos | vpn-instance
vpn-instance-name ] *
undo rule rule-id [ destination | destination-port | dscp | established | fragment |
icmp-type | logging | precedence | reflective | source | source-port | time-range |
tos | vpn-instance ] *
View
Advanced IPv4 ACL view
Parameters
rule-id: Advanced IPv4 ACL rule number in the range 0 to 65534.
deny: Defines a deny statement to drop matched packets.
permit: Defines a permit statement to allow matched packets to pass.
protocol: Protocol carried by IP. It can be a number in the range 0 to 255, or in words,
gre (47), icmp (1), igmp (2), ip, ipinip (4), ospf (89), tcp (6), udp (17).
Table 1-4 Parameters for advanced IPv4 ACL rules
Parameters
source { sour-addr
sour-wildcard |
any }
destination
{ dest-addr
dest-wildcard |
any }
precedence
precedence
Function
The sour-addr sour-wildcard argument
specifies a source IP address in dotted
Specifies a source decimal notation. Setting the wildcard to
address. a zero indicates a host address. The any
keyword indicates any source IP
address.
The dest-addr dest-wildcard argument
specifies a destination IP address in
Specifies a
dotted decimal notation. Setting the
destination
dest-wildcard to a zero indicates a host
address.
address. The any keyword indicates any
destination IP address.
The precedence argument can be a
Specifies an IP number in the range 0 to 7, or in words,
precedence routine(0), priority(1), immediate(2),
value. flash(3), flash-override(4), critical(5),
internet(6), or network(7).
1-14
Chapter 1 ACL Configuration Commands
Description