9
Copying an IPv4 basic, IPv4 advanced, or Ethernet frame
header ACL
Step Command
1.
Enter system view.
system-view
2.
Copy an existing IPv4
basic, IPv4 advanced,
or Ethernet frame
header ACL to create a
new ACL.
acl copy
{
source-acl-number
|
name
source-acl-name
}
to
{
dest-acl-number
|
name
dest-acl-name
}
Copying an IPv6 basic or IPv6 advanced ACL
Step Command
1.
Enter system view.
system-view
2.
Copy an existing IPv6 basic
or IPv6 advanced ACL to
create a new ACL.
acl ipv6 copy
{
source-acl6-number
|
name
source-acl6-name
}
to
{
dest-acl6-number
|
name
dest-acl6-name
}
Enabling ACL acceleration for an IPv4 basic or
IPv4 advanced ACL
CAUTION:
•
ACL acceleration is not available for ACLs that contain a non-contiguous wildcard mask.
•
After you modify an ACL with ACL acceleration enabled, disable and re-enable ACL acceleration
to ensure correct rule matching.
ACL acceleration speeds up ACL lookup. The acceleration effect increases with the number of ACL
rules. ACL acceleration uses memory. To achieve the best trade-off between memory and ACL
processing performance, Hewlett Packard Enterprise recommends enabling ACL acceleration for
large ACLs, for example, ACLs containing more than 50 rules.
For example, when you use a large ACL for a session-based service, you can enable ACL
acceleration to avoid session timeouts caused by ACL processing delays.
Enable ACL acceleration in an ACL after you have finished editing ACL rules. ACL acceleration
always uses ACL criteria that have been set before it is enabled for rule matching. It does not
synchronize with any subsequent match criterion changes.
To enable ACL acceleration for an IPv4 basic or IPv4 advanced ACL:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable ACL
acceleration for an
IPv4 basic or IPv4
advanced ACL.
acl accelerate number
acl-number
By default, the function is disabled.
The ACL must exist.
Only IPv4 basic ACLs and advanced ACLs
support ACL acceleration.
