3Com Switch 8807, Command Reference Manual

Page: 231 / 1099

ACL Commands 229
Description
Use the rule command to add a rule to the ACL.
Use the undo rule command to delete a rule from the ACL.
You can define multiple rules for an ACL. Only the specified rules will be deleted if
you select parameters in the
undo rule command.
If you redefine an existing rule, the newly configured option automatically
overwrites the corresponding option of the original rule, and the option not being
redefined remains. For example:
With the original rule 0:
[acl number 2000]rule 0 permit source 10.1.1.1 0 time-range 3Com
when redefine it as follows:
[acl number 2000]rule 0 permit source 10.1.1.2 0 fragment
it becomes:
rule 0 permit source 10.1.1.2 0 fragment time-range 3Com
That is, the source option is replaced with 10.1.1.2, the fragment option which
the original rule does not contain is added, and the time-range 3Com option
which the original rule contains is reserved.
c
CAUTION:
■
If you want to replace an existing rule, you are recommended to use the undo
command to delete the original rule fist, and then reconfigure the rule. This
makes sure the unwanted options are completely removed.
■
If you configure a rule without providing the rule number, the system will
automatically generate a new rule if the rule is not identical to any existing
rules.
■
The rule with the specified bt-flag cannot be used in the traffic-redirect
command.
Related command: acl .
Example
# Add a rule to the advanced ACL.
<SW8800> system-view
System View: return to User View with Ctrl+Z.
[SW8800]acl number 3000
[3Com-acl-adv-3000] rule 1 permit tcp established source 1.1.1.1 0
destination 2.2.2.2 0
time-range Syntax
time-range time-name { start-time to end-time days-of-the-week [ from
start-time start-date ] [ to end-time end-date ] | from start-time start-date [ to
end-time end-date ] | to end-time end-date }