H3C S7500 Series Ethernet Switches Command Manual

Table Of Contents
Command Manual – ACL
H3C S7500 Series Ethernet Switches Chapter 1
ACL Commands
1-12
Parameter Description
user-group { acl-number
| acl-name }
User-defined ACL
acl-number: ACL number of a user-defined ACL,
ranging from 5,000 to 5,999.
acl-name: ACL name, case insensitive string, up to 32
characters long, beginning with an English letter (a to z
or A to Z), without space or quotation mark.
rule-id
ACL rule number, ranging from 0 to 127. If this
argument is not specified, all rules in the specified ACL
will be applied.
system-index: Specifies an interior index value which is used when an ACL rule is
applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is
only available when the ACL rule number is specified in the command.
not-care-for-interface: As for a non-48-port Type A LPU, the packet-filtering function
will take place on the LPU where the current port resides after this keyword is chosen.
As for a 48-port Type A LPU, if the current port number is in the range of 1 to 24, the
packet filtering will take effect on port 1 through port 24 after the keyword is chosen; if
the current port number is in the range of 25 to 48, the packet filtering will take effect on
port 25 through port 48 after the keyword is chosen.
Description
Use the packet-filter command to activate ACL on a port to filter packets.
Use the undo packet-filter command to cancel the configuration.
Examples
# Apply ACL 2000 on Ethernet 3/0/1 to filter packets.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet3/0/1
[H3C-Ethernet3/0/1] qos
[H3C-qoss-Ethernet3/0/1] packet-filter inbound ip-group 2000
1.1.12 reset acl counter
Syntax
reset acl counter { all | acl-number | acl-name }
View
User view