H3C S7500 Series Ethernet Switches Command Manual

Table Of Contents
Command Manual – ACL
H3C S7500 Series Ethernet Switches Chapter 1
ACL Commands
1-21
Note:
Type A LPUs do not support to apply ACL rules configured with tos tos or fragment to
hardware.
Examples
# Define a rule to permit TCP packets sent from hosts in the network segment of
129.9.0.0 to hosts in the network of 202.38.160.0 and with the port number of 80 to
pass.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] acl number 3101
[H3C-acl-adv-3101] rule permit tcp source 129.9.0.0 0.0.255.255 destination
202.38.160.0 0.0.0.255 destination-port eq 80
1.1.15 rule (Layer 2 ACL)
Syntax
rule [ rule-id ] { permit | deny } [ rule-string ]
undo rule rule-id
View
Layer 2 ACL view
Parameters
rule-id: ACL rule ID, in the range of 0 to 127.
deny: Drops packets that satisfy the condition.
permit: Permits packets that satisfy the condition to pass.
rule-string: ACL rule information, which can be combination of the parameters
described in
Table 1-15.