3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

Introduction to ACL 71
■ rule-id: Number of ACL rule, which should be an existing ACL rule number. If
there is no parameter followed, the entire ACL rule will be deleted. Otherwise,
only part of information related to the ACL rule will be deleted.
■ source: Optional parameter. Only the source address information setting of
ACL rule with corresponding number will be deleted.
■ destination: Optional parameter. Only the destination address information
setting of ACL rule with corresponding number will be deleted.
■ source-port: Optional parameter. Only source port information setting of ACL
rule with corresponding number will be deleted. It is only valid when the
protocol number of the rule is TCP or UDP.
■ destination-port: Optional parameter. Only the destination port information
setting of ACL rule with corresponding number will be deleted. It is only valid
when the protocol number of the rule is TCP or UDP.
■ icmp-type: Optional parameter. Only ICMP type and message code
information setting of ACL rule with corresponding number will be deleted. It
is only valid when the protocol number of the rule is ICMP.
■ dscp: Optional parameter. Only the DSCP setting in the ACL rule with
corresponding number will be deleted.
■ precedence: Optional parameter. Only the precedence setting of ACL rule
with corresponding number will be deleted.
■ tos: Optional parameter. Only the tos setting of ACL rule with corresponding
number will be deleted.
■ time-range: Optional parameter. Only the specific effective time range setting
of ACL rule with corresponding number will be deleted.
■ logging: Optional parameter. Only the logging qualified packet setting of ACL
rule with corresponding number will be deleted.
■ fragment: Optional parameter. Only the validation setting solely for
non-first-fragment of ACL rule with corresponding number will be deleted.
Only TCP and UDP protocols need to specify port range. The supported operators
and grammar are listed below.
When specifying portnumber, part of common port numbers can use mnemonics
to substitute actual numbers. The supported mnemonics are shown in the table
below.
Tab le 58 Operator meaning of advanced ACL
Operator and grammar Meaning
eq portnumber Equal to port number
gt portnumber Greater than port number
lt portnumber Lower than port number
neq portnumber Not equal to port number
range portnumber1 portnumber2 Between portnumber1 and portnumber2