3Com Switch 4210 9-Port, Configuration Manual

Page: 298 / 567

296 C
HAPTER
27: ACL C
ONFIGURATION
An advanced ACL can be numbered from 3000 to 3999. Note that ACL 3998 and
ACL 3999 cannot be configured because they are reserved for cluster
management.
Advanced ACLs support analysis and processing of three packet priority levels:
type of service (ToS) priority, IP priority and differentiated services codepoint
(DSCP) priority.
Using advanced ACLs, you can define classification rules that are more accurate,
more abundant, and more flexible than those defined for basic ACLs.
Configuration Prerequisites
■
To configure a time range-based advanced ACL rule, create the corresponding
time ranges first, as described in the section entitled “Configuring a Time
Range” on page 293.
■
Determine the settings to be specified in the rule, such as source and
destination IP addresses, the protocols carried by IP, and protocol-specific
features.
Configuration Procedure
Note that:
■
With the config match order specified for the advanced ACL, you can modify
any existent rule. The unmodified part of the rule remains. With the auto
match order specified for the ACL, you cannot modify any existent rule;
otherwise the system prompts error information.
■
If you do not specify the rule-id argument when creating an ACL rule, the rule
will be numbered automatically. If the ACL has no rules, the rule is numbered
0; otherwise, it is the maximum rule number plus one.
■
The content of a modified or created rule cannot be identical with the content
of any existing rules; otherwise the rule modification or creation will fail, and
the system prompts that the rule already exists.
■
If the ACL is created with the auto keyword specified, the newly created rules
will be inserted in the existent ones by depth-first principle, but the numbers of
the existent rules are unaltered.
Table 218 Define an advanced ACL rule
Operation Command Description
Enter system view system-view -
Create an advanced ACL and
enter advanced ACL view acl number acl-number [
match-order { auto | config
} ]
Required
config by default
Define an ACL rule rule [ rule-id ] { permit | deny
} protocol [ rule-string ]
Required
For information about
protocol and rule-string , refer
to ACL Commands .
Assign a description string to
the ACL rule rule rule-id comment text Optional
No description by default
Assign a description string to
the ACL description text Optional
No description by default