Operation Manual – ACL
Quidway S3100 Series Ethernet Switches Chapter 1
ACL Configuration
Huawei Technologies Proprietary
1-4
1.5 ACL Configuration
1.5.1 Prerequisites
To configure a time range-based ACL rule, you need to define the corresponding time
range first.
Note the following when you define an ACL rule with the rule number specified:
z If the specified rule number identifies an existing ACL rule, the existing ACL rule
is edited.
z If the specified rule number identifies no ACL rule, a new ACL rule is created.
If you define an ACL rule with the rule number not specified, a new ACL rule is created,
and the switch allocates a rule number for it automatically.
1.5.2 Creating a Basic ACL
The ACL number of a basic ACL ranges from 2000 to 2999.
Table 1-3 Create a basic ACL
Operation Command Description
Enter system view
system-view
—
Create a basic
ACL
acl number acl-number
[ match-order { config |
auto } ]
By default, the config
keyword is specified, that is,
ACL rules are matched in the
order they are created.
Define an ACL rule
rule [ rule-id ] { permit |
deny } [ source { sour-addr
sour-wildcard | any } ]
[ time-range time-name ]
[ fragment ]
Required
Specify ACL
description
description text
Optional
Display ACL
information
display acl { all |
acl-number }
You can execute the display
command in any view.
1.5.3 Creating an Advanced ACL
The ACL number of an advanced ACL ranges from 3000 to 3999.