H3C S7500 Series Ethernet Switches Command Manual

Command Manual – ACL
H3C S7500 Series Ethernet Switches Chapter 1
ACL Commands
1-15
 Note:
Type A LPUs do not support to apply ACL rules configured with fragment to hardware.
Examples
# Define a rule to deny the packets whose source IP addresses are 1.1.1.1.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] acl number 2000
[H3C-acl-basic-2000] rule deny source 1.1.1.1 0
1.1.14 rule (Advanced ACL)
Syntax
rule [ rule-id ] { permit | deny } rule-string
undo rule rule-id [ source | destination | source-port | destination-port | icmp-type
| precedence | tos | dscp | fragment | time-range ]*
View
Advanced ACL view
Parameters
rule-id: ACL rule ID, in the range of 0 to 127.
deny: Drops packets that satisfy the condition.
permit: Permits packets that satisfy the condition to pass.
rule-string: Rule information, which can be combination of the parameters described in
Table 1-8. You need to configure the protocol argument in the rule information before
you can configure other arguments.
Table 1-8 Rule information
Parameter Type Function Description
protocol
Protocol type
Type of the
protocols carried
by IP
When expressed
in numerals, the
value range is 1 to
255.
When expressed
with a name, the
value can be GRE,
ICMP, IGMP, IP,
IPinIP, OSPF,
TCP, and UDP.