H3C S7500 Series Ethernet Switches Command Manual

Command Manual – ACL
H3C S7500 Series Ethernet Switches Chapter 1
ACL Commands
1-2
user: User-defined ACL..
config: Specifies to employ the user’s configuration order when matching ACL rules.
auto: Specifies to employ the depth first order when matching ACL rules.
all: Deletes all ACLs (including those identified by a number or a name).
Description
Use the acl command to define an ACL and enter the corresponding ACL view.
Use the undo acl command to delete all entries of an ACL identified by a number or a
name, or all ACLs.
By default, ACL rules are matched according to the configured order (config).
After entering the corresponding ACL view, you can use the rule command to add
entries to the ACL (use the quit command to quit ACL view).
 Note:
User-defined ACLs can only be activated on the LPUs other than Type A.
You can use the match-order keyword to specify whether to use the configured order
or the “depth-first” order (rules with smaller ranges are matched first) to match rules. If
neither match orders are specified, the configured match order will be adopted.
You cannot modify the match order for an ACL once you have specified it, unless you
delete all the entries of the ACL, and specify the match order over again.
The ACL match order feature is effective only when the ACL is referenced by software
for data filtering and traffic classification.
Related commands: rule, acl mode.
Examples
# Define rules for ACL 2000, and specify depth-first order as the rule match order.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] acl number 2000 match-order auto
1.1.2 acl mode
Syntax
acl mode { ip-based | link-based }