Huawei AR1200-S User Manual

acl-number specifies the number of an advanced ACL. The value ranges from 3000
to 3999.
match-order specifies the matching order of advanced ACL rules:
– auto: indicates that ACL rules are matched based on the depth first principle.
– config: indicates that ACL rules are matched based on the sequence in which they
were configured.
3. (Optional) Run:
description text
The description of the advanced ACL is configured.
The description of an ACL describes the function or usage of the ACL. It is used to
differentiate ACLs.
By default, no description is configured for an ACL.
----End
Follow-up Procedure
Configure rules in the advanced ACL.
10.4.4 Configuring an Advanced ACL Rule
An advanced ACL is composed of a list of rules. The ACL classifies packets by matching packet
information with the ACL rules.
Prerequisites
An advanced ACL has been created and the advanced ACL view is displayed.
Before creating a new rule, run the display acl { acl-number | name acl-name } command to
view all the configured ACL rules to prevent the new rule from overriding existing rules.
Context
An advanced ACL classifies packets by matching packet information with its rules. After an
advanced ACL is created, configure rules in the advanced ACL.
Procedure
Step 1 (Optional) Run:
step step-value
The step value between ACL rule IDs is set.
By default, the step value is 5.
Step 2 Configure an advanced ACL rule based on the IP protocol version or the type of the protocol
over IP.
l When IPv4 is used, run:
rule { deny | permit } ip [ destination { destination-address destination-wildcard | any } |
source { source-address source-wildcard | any } | time-range time-name | vpn-instance
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 10 ACL Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
198

Huawei AR1200-S Specifications

General

Brand	Huawei
Model	AR1200-S
Category	Network Router
Language	English