3Com Switch 8800 Configuration Guide
Chapter 32 ACL Configuration
32-10
32.2.4 Activating ACL
After defining an ACL, you must activate it. This configuration activates those ACLs to
filter or classify the packets forwarded by hardware.
For interface cards, perform the following configurations in Ethernet port view or port
group view.
Table 32-11
Activate ACL
Operation
Command
Activate IP group ACL
packet-filter
inbound
ip-group
{
acl
-
number
|
acl
-
name
} [
rule
rule
[
system-index
index
] ]
Deactivate IP group ACL
undo
packet-filter
inbound
ip-group
{
acl
-
number
|
acl
-
name
} [
rule
rule
]
Activate IP group ACL
and link group ACL at
same time
packet-filter
inbound
ip-group
{
acl
-
number
|
acl
-
name
} {
rule
rule
link-group
{
acl
-
number
|
acl
-
name
} [
rule
rule
[
system-index
index
] ] |
link-group
{
acl
-
number
|
acl
-
name
}
rule
rule
}
Deactivate IP group ACL
and link group ACL at
same time
undo
packet-filter
inbound
ip-group
{
acl
-
number
|
acl
-
name
} {
rule
rule
link-group
{
acl
-
number
|
acl
-
name
} [
rule
rule
] |
link-group
{
acl
-
number
|
acl
-
name
}
rule
rule
}
Activate link group ACL
packet-filter
inbound
link-group
{
acl
-
number
|
acl
-
name
} [
rule
rule
[
system-index
index
] ]
Deactivate link group
ACL
undo
packet-filter
inbound
link-group
{
acl
-
number
|
acl
-
name
} [
rule
rule
]
system-index
index
here is the system index for an ACL rule. When delivering a rule,
the system assigns an index to it, for convenience of later retrieval. You can also assign
a system index for it when activating an ACL rule with this command. However, you are
not recommended to assign a system index if not urgently necessary.
32.3 Displaying and Debugging ACL Configurations
After these configurations are completed, you can use the
display
command in any
view to view ACL running to check configuration result. You can clear ACL statistics
using the
display
command in user view.
Table 32-12
Display and debug ACL configurations
Operation
Command
Display time range configuration
display time-range
{
all
|
name
}
