3Com 7750 Series, Справочник по командам

Страница: 802 / 1177

3Com Switch 7750 Series
Command Reference Guide – ACL Chapter 1 ACL Commands
1-21
z
If the rule corresponding to the specified rule ID does not exists, you will create
and define a new rule.
z
The content of a modified or created rule must not be identical with the content of
any existing rule; otherwise the rule modification or creation will fail, and the
system will prompt that the rule already exists.
If you do not specify a rule ID, you will create and define a new rule, and the system
will assign an ID for the rule automatically.
Note:
A type card does not support ACL rules configured with icmp-type type code , tos tos ,
or fragment .
Example
# Define a rule to permit packets from hosts in the network segment of 129.9.0.0 to
hosts in the network of 202.38.160.0 and with the port number of 80 to pass.
<3Com> system-view
System View: return to User View with Ctrl+Z.
[3Com] acl number 3101
[3Com-acl-adv-3101] rule permit tcp source 129.9.0.0 0.0.255.255 destination
202.38.160.0 0.0.0.255 destination-port eq 80
1.1.15 rule (Layer 2 ACL)
Syntax
rule [ rule-id ] { permit | deny } [ rule-string ]
undo rule rule-id
View
Layer 2 ACL view
Parameter
rule-id : ACL rule ID, in the range of 0 to 127.
deny : Drops packets that satisfy the condition.
permit : Permits packets that satisfy the condition to pass.
rule-string : ACL rule information, which can be combination of the parameters
described in Table 1-15.