Command Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches
Chapter 1 ACL Commands
Huawei Technologies Proprietary
1-24
{
rule-string
rule-mask
offset
}&<1-8>:
rule-string
is a character string of a rule defined
by a user. It only consists of hexadecimal numbers of even digits.
rule-mask
offset
is
used to extract the packet information. Here,
rule-mask
is rule mask, used for logical
AND operation with data packets, and
offset
determines to perform AND operation from
which bytes apart from the packet header.
rule-mask
offset
extracts a character string
from the packet and compares it with the user-defined
rule-string
to get and process the
matched packets. &<1-8> indicates that you can define up to 8 such rules at a time.
This parameter is used for the user-defined ACL.
Description
Using
rule
command, you can add a rule to an ACL. Using
undo rule
command, you
can cancel a rule from an ACL.
You can add a lot of rules to an ACL. If you input the parameter when use the
undo rule
command, the system will delete the corresponding content of the rule according to the
parameter input.
For related configurations, refer to command
acl
.
Example
# Add a rule to an advanced ACL.
[Quidway-acl-adv-3000] rule 1 permit tcp established source 1.1.1.1 0
destination 2.2.2.2 0
# Add a rule to a basic ACL.
[Quidway-acl-basic-2000] rule 1 permit source 1.1.1.1 0 fragment
# Add a rule to an L2 ACL.
[Quidway-acl-link-4000] rule 1 permit ingress 1 egress any
# Add a rule to a user-defined ACL.
[Quidway-acl-user-5000] rule 1 permit 88 ff 18
1.2.8 time-range
Syntax
time-range time-name
{
start-time to end-time
days-of-the-week
[
from
start-time
start-date
] [
to
end-time end-date
] |
from
start-time start-date
[
to
end-time end-date
] }
undo time-range time-name
[
start-time to end-time
days-of-the-week
[
from
start-time start-date
] [
to
end-time end-date
] |
from
start-time start-date
[
to
end-time
end-date
] ]
View
System view