3Com 4500 PWR 26-Port Configuration Manual page 522

Co nfiguration procedure
Follo w these step s to define an advanced ACL rule:
To do...
Enter system view
Cr eate an advanced ACL and
enter a dvanced ACL view
Define an ACL rule
Assign a description string to
the ACL rule
As sign a de scription string to
the ACL
Note that:
With the config match order specified for the advanced ACL, you can modify any existent rule. The
unmodified part of the rule remains. With the auto match order specified for
modify any existent ru
If you do not specify the rule-
automatically. If the ACL has no rules, the rule is numbered 0; otherwise, the number of the rule will
be the greatest rule number plus one. I
system will tell you that the rule cannot be create
The content of a modified or created rule cannot be identical with the content of any existing rules;
otherwise the rule modification or creation
exists.
If the ACL is cr eated with the auto keyword specified, the newly created rules will be inserted in the
existent ones by depth-first principle, but the numbers of the existent rules are unaltered.
Configuration example
# Configure ACL 3000 to p
for the network 202.38.160.0/24 and with the destination port number being 80.
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0
0.0.0.255 destination-port
# Display the configuration information of ACL 3000.
[Sys name-acl-adv-3000] display acl 3000
Advanced ACL 3000, 1 rule
Acl' s step is 1
rule 0 permit tcp so
destination-port eq www
Use the command...
system-view
acl number acl-number
[ match-order { auto |
config } ]
rule [ rule-id ] { permit | deny }
protocol [ rule-string ]
rule rule-id comment text
description text
le; otherwise the system will tell you that the rule cannot be modified.
id argument when creating an ACL rule, the rule will be numbered
f the current greatest rule number is 65534, however, the
will fail, and the system prompts that the rule already
ermit the TCP packets sourced from the network 129.9.0.0/16 and destined
eq 80
urce 129.9.0.0 0.0.255.255 destination 202.38.160.0 0.0.0.255
44-7
—
Required
config by default
Required
For information about protocol
and rule-string, refer to ACL
Commands.
Optional
No description by default
Optional
No description by default
d and you need to specify a number for the rule.
Remarks
the ACL, you cannot