R3166-R3206-HP High-End Firewalls Network Management Command Reference-6PW101

Table Of Contents
375
if-match acl
Syntax
if-match acl acl-number
undo if-match acl
View
PBR policy node view
Default level
2: System level
Parameters
acl-number: ACL number, in the range of 2000 to 3999. The number of a basic ACL ranges from 2000
to 2999 and that of an advanced ACL ranges from 3000 to 3999.
Description
Use the if-match acl command to define an ACL match criterion.
Use the undo if-match acl command to remove the ACL match criterion.
Examples
# Permit the packets matching ACL 2010.
<Sysname> system-view
[Sysname] policy-based-route aa permit node 11
[Sysname-pbr-aa-11] if-match acl 2010
if-match packet-length
Syntax
if-match packet-length min-len max-len
undo if-match packet-length
View
PBR policy node view
Default level
2: System level
Parameters
min-len: Minimum IP packet length in bytes, in the range of 0 to 65535.
max-len: Maximum IP packet length in bytes, in the range of 1 to 65535. The value of max-len must be
no less than that of min-len.
Description
Use the if-match packet-length command to define a packet length match criterion.
Use the undo if-match packet-length command to remove the match criterion.
Examples
# Match the packets with a length from 100 to 200 bytes.
<Sysname> system-view