Operation Manual – ACL
H3C S3610&S5510 Series Ethernet Switches
Chapter 2 IPv4 ACL Configuration
2-3
Time-range : test ( Inactive )
from 15:00 1/28/2006 to 15:00 1/28/2008
2.2 Configuring a Basic IPv4 ACL
Basic IPv4 ACLs filter packets based on source IP address. They are numbered in the
range 2000 to 2999.
2.2.1 Configuration Prerequisites
If you want to reference a time range to a rule, define it with the
time-range
command
first.
2.2.2 Configuration Procedure
Follow these steps to configure a basic IPv4 ACL:
To do…
Use the command…
Remarks
Enter system view
system-view
––
Create and enter
basic IPv4 ACL view
acl number
acl-number
[
name acl-name
]
[
match-order
{
auto
|
config
} ]
Required
The default match order is
config
.
If you specify a name for
an IPv4 ACL when
creating the ACL, you can
use the
acl
name
acl-name
command to
enter the view of the ACL
later.
Create or modify a
rule
rule
[
rule-id
] {
deny
|
permit
}
[
fragment
|
logging
|
source
{
sour-addr sour-wildcard
|
any
} |
time-range
time-name
]
*
Required
To create multiple rules,
repeat this step.
Set a rule numbering
step
step
step-value
Optional
The default step is 5.
Create an IPv4 ACL
description
description
text
Optional
By default, no IPv4 ACL
description is present.
Create a rule
description
rule rule-id comment text
Optional
By default, no rule
description is present.
