3Com 4210 PWR Configuration Manual page 298

9/18/26 port and pwr 9/18/26 port 4210 series switch
Table of Contents

Advertisement

296
C
27: ACL C
HAPTER
ONFIGURATION
An advanced ACL can be numbered from 3000 to 3999. Note that ACL 3998 and
ACL 3999 cannot be configured because they are reserved for cluster
management.
Advanced ACLs support analysis and processing of three packet priority levels:
type of service (ToS) priority, IP priority and differentiated services codepoint
(DSCP) priority.
Using advanced ACLs, you can define classification rules that are more accurate,
more abundant, and more flexible than those defined for basic ACLs.
Configuration Prerequisites
To configure a time range-based advanced ACL rule, create the corresponding
time ranges first, as described in the section entitled "Configuring a Time
Range" on page 293.
Determine the settings to be specified in the rule, such as source and
destination IP addresses, the protocols carried by IP, and protocol-specific
features.
Configuration Procedure
Table 218 Define an advanced ACL rule
Operation
Enter system view
Create an advanced ACL and
enter advanced ACL view
Define an ACL rule
Assign a description string to
the ACL rule
Assign a description string to
the ACL
Note that:
With the config match order specified for the advanced ACL, you can modify
any existent rule. The unmodified part of the rule remains. With the auto
match order specified for the ACL, you cannot modify any existent rule;
otherwise the system prompts error information.
If you do not specify the rule-id argument when creating an ACL rule, the rule
will be numbered automatically. If the ACL has no rules, the rule is numbered
0; otherwise, it is the maximum rule number plus one.
The content of a modified or created rule cannot be identical with the content
of any existing rules; otherwise the rule modification or creation will fail, and
the system prompts that the rule already exists.
If the ACL is created with the auto keyword specified, the newly created rules
will be inserted in the existent ones by depth-first principle, but the numbers of
the existent rules are unaltered.
Command
system-view
acl number acl-number [
match-order { auto | config
} ]
rule [ rule-id ] { permit | deny
} protocol [ rule-string ]
rule rule-id comment text
description text
Description
-
Required
config by default
Required
For information about
protocol and rule-string, refer
to ACL Commands.
Optional
No description by default
Optional
No description by default

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents