3Com 5500-EI PWR, Справочное руководство

Страница: 764 / 1314

1-25
In this example, the 32-byte rule string occupies eight offset units: 4 to 7 (Offset2), 8 to 11 (Offset3), 12
to 15 (Offset4), 16 to 19 (Offset5), 20 to 23 (Offset1), 24 to 27 (Offset7), 28 to 31 (Offset8), and 32 to 35
(Offset6), as shown in Table 1-16 . The rule can be assigned successfully.
# Create user-defined ACL 5003 and define rule 1, specifying a 32-byte rule string, a rule mask of all Fs,
and an offset of 24. Then, apply the ACL to Ethernet 1/0/2.
[Sysname] acl number 5003
[Sysname-acl-user-5003] rule 1 deny
1234567890123456789012345678901234567890123456789012345678901234
ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 24
[Sysname-acl-user-5003] quit
[Sysname] interface Ethernet 1/0/2
[Sysname-Ethernet1/0/2] packet-filter inbound user-group 5003
Applying Acl 5003 rule 1 failed!
Reason: This type of ACL rule is not supported by the command which is attempting to use
the ACL!(Ethernet1/0/2)
In this example, the 32-byte rule string does not comply with the rule that a user-defined rule string can
contain up to eight mask offset units, and any two offset units cannot belong to the same offset group.
The ACL cannot be assigned.
After completing the above configuration, you can use the display acl command to view the
configuration information of the ACLs.
rule comment
Syntax
rule rule-id comment text
undo rule rule-id comment
View
Advanced ACL view, Layer 2 ACL view, user-defined ACL view
Parameters
rule-id : ID of the ACL rule, in the range of 0 to 65534.
text : Comment for the ACL rule, a string of 1 to 127 characters. Blank spaces and special characters
are acceptable.
Description
Use the rule comment command to define a comment for the ACL rule.
Use the undo rule comment command to remove the comment defined for the ACL rule.
You can give rules comments to provide relevant information such as their application purposes and the
ports they are applied to, so that you can easily identity and distinguish ACL rules by their comments.
By default, an ACL rule has no comment.
Before defining a comment for an ACL rule, make sure that the ACL rule exists.