Types Of Acls Supported By Ethernet Switches; Choosing Acl Mode For Traffic Flows; Configuration Procedure; Configuration Example - H3C S7500 Series Operation Manual

Operation Manual – ACL
H3C S7500 Series Ethernet Switches
range. If you remove the time range of an ACL rule, the ACL rule becomes invalid the
next time the ACL rule timer refreshes.

1.1.4 Types of ACLs Supported by Ethernet Switches

The following types of ACLs are supported by Ethernet switches:
Basic ACL
Advanced ACL
Layer 2 ACL
User-defined ACL

1.2 Choosing ACL Mode for Traffic Flows

A switch can only choose one ACL mode for traffic flows, Layer 2 ACL mode or Layer 3
ACL mode. In Layer 2 ACL mode, only Layer 2 ACL can be activated or imported by
other applications, and Layer 3 ACL mode is similar.

1.2.1 Configuration Procedure

Table 1-1 Choose ACL mode for traffic flows
To do...
Enter system view
Choose ACL mode
for traffic flows
Display the ACL
mode for traffic flows
Note:
This configuration is only effective on Type A line processing units (LPUs).

1.2.2 Configuration Example

# Configure the ACL mode for traffic flows as link-based.
<H3C> system-view
[H3C] acl mode link-based
[H3C] display acl mode
Use the command...
system-view
acl mode { ip-based
| link-based }
display acl mode
1-4
Chapter 1 ACL Configuration
Remarks
—
Required
By default, a switch chooses
ip-based ACL mode for traffic flows,
that is, ACL classifies the traffic
flows based on Layer 3 information.
Optional
The display command can be
executed in any view