3Com Switch 8800 Configuration Guide
Chapter 32 ACL Configuration
32-9
Table 32-9
Define advanced ACL
Operation
Command
Enter advanced ACL
view (system view)
acl
{
number acl
-
number
|
name
acl
-
name
advanced
}
[
match-order
{
config
|
auto
} ]
Define an ACL rule
(advanced ACL view)
rule
[
rule
-
id
] {
permit
|
deny
}
protocol
[
source
{
source
-
addr
wildcard
|
any
} ] [
destination
{
dest
-
addr
wildcard
|
any
} ] [
source-port
operator
port1
[
port2
] ]
[
destination-port
operator
port1
[
port2
] ] [
icmp-type
type
code
] [
established
] [ [
precedence
precedence
|
tos
tos
]* |
dscp
dscp
] [
fragment
] [
time-range
name
]
[
vpn-instance instance
-
name
]
Delete an ACL rule
(advanced ACL view)
undo rule rule
-
id
[
source
|
destination
|
source-port
|
destination-port
|
icmp-type
|
precedence
|
tos
|
dscp
|
fragment
|
time-range
|
vpn-instance
]*
Delete an ACL or all
ACLs (system view)
undo acl
{
number acl
-
number
|
name acl
-
name
|
all
}
Note that the
port1
and
port2
parameters in the command should be TCP/UDP ports for
advanced applications. For some common ports, you can use mnemonic symbols to
replace numbers. For example, you can use “bgp” to represent TCP port 179, which is
for BGP protocol.
III. Defining L2 ACLs
L2 ACLs define the Layer 2 information such as source and destination MAC
addresses, source VLAN ID, and L2 protocol type in their rules and process packets
according to these attributes.
Perform the following configurations in the specified view.
Table 32-10
Define L2 ACLs
Operation
Command
Enter L2 ACL view (system
view)
acl
{
number acl
-
number
|
name
acl
-
name
link
}
[
match-order
{
config
|
auto
} ]
Define an ACL rule (L2 ACL
view)
rule
[
rule
-
id
] {
permit
|
deny
} [
cos cos
-
value
|
{
arp
|
ip
|
mpls
[
l2lable-range
] [
exp exp
-
value
] |
nbx
|
pppoe-control
|
pppoe-data
|
rarp
} |
ingress
{ {
source
-
vlan
-
id
|
source
-
mac
-
addr
source
-
mac
-
wildcard
}* |
any
} |
egress
{
dest
-
mac
-
addr
dest
-
mac
-
wildcard
|
any
} |
time-range
name
]*
Delete an ACL rule (L2 ACL
view)
undo rule
rule
-
id
Delete an ACL or all ACLs
(system view)
undo acl
{
number acl
-
number
|
name acl
-
name
|
all
}
