Activating Acl - Huawei Quidway S3000-EI Series Operation Manual

Operation Manual - QoS/ACL
Quidway S3000-EI Series Ethernet Switches
Note:
When user defines user-defined ACL, please calculate and set the correct offsets
according to the data frames of SNAP+tag format with the 802.3 standard described
above.
You can use the following commands to define user-defined ACL.
Perform the following configuration in corresponding view.
Table 1-8 Defining the user-defined ACL
Enter
system view)
Add a sub-item to the ACL(from
user-defined ACL view)
Delete a sub-item from the ACL(from
user-defined ACL view)
Delete one ACL or all the ACL(from
system view)
The self-defined ACL are identified with the numbers ranging from 5000 to 5999.

1.2.3 Activating ACL

The defined ACL can be active after activated globally on the switch. This function is
used to activate the ACL filtering or classify the data transmitted by the hardware of
switch.
You can use the following command to activate the defined ACL.
Perform the following configuration in system view.
Table 1-9 Activating ACL
Operation
Activate
ACL
Deactivate an
ACL
Operation
user-defined ACL
packet-filter { user-group { acl-number | acl-name } [ rule rule ] |
an
{ ip-group { acl-number | acl-name } [ rule rule ] | link-group
{ acl-number | acl-name } [ rule rule ] }* }
undo packet-filter { user-group { acl-number | acl-name } [ rule
rule ] | { ip-group { acl-number | acl-name } [ rule rule ] | link-group
{ acl-number | acl-name } [ rule rule ] }* }
Huawei Technologies Proprietary
acl { number acl-number | name
view(from
acl-name user } [ match-order { config
| auto } ]
rule [ rule-id ] { permit | deny }
{ rule-string rule-mask offset }&<1-8>
[ time-range name ]
undo rule rule-id
undo acl { number acl-number | name
acl-name | all }
Command
1-8
Chapter 1 ACL Configuration
Command