F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

27
Views
IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view
Default command level
2: System level
Parameters
rule-id: Specifies an ACL rule ID, in the range of 0 to 65534. The ACL rule must already exist.
text: Specifies a comment about the ACL rule, a case-sensitive string of 1 to 127 characters.
Examples
# Create a rule in IPv4 basic ACL 2000 and add a comment about the rule.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule 0 deny source 1.1.1.1 0
[Sysname-acl-basic-2000] rule 0 comment This rule is used on GigabitEthernet 0/1.
# Create a rule in IPv6 basic ACL 2000 and add a comment about the rule.
<Sysname> system-view
[Sysname] acl ipv6 number 2000
[Sysname-acl6-basic-2000] rule 0 permit source 1001::1 128
[Sysname-acl6-basic-2000] rule 0 comment This rule is used on GigabitEthernet 0/1.
Related commands
• display acl
• display acl ipv6
rule remark
Use rule remark to add a start or end remark for a range of rules that are created for the same purpose.
Use undo rule remark to delete the specified or all rule range remarks.
Syntax
rule [ rule-id ] remark text
undo rule [ rule-id ] remark [ text ]
Default
No rule range remarks are configured.
Views
IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view
Default command level
2: System level
Parameters
rule-id: Specifies a rule number in the range of 0 to 65534. The specified rule can be one that has been
created or not. If you specify no rule ID when adding a remark, the system automatically picks the rule ID
that is the nearest higher multiple of the numbering step to the current highest rule ID. For example, if the
rule numbering step is 5 and the current highest rule ID is 28, the system picks rule 30.