Installation manual

Command Manual - QoS/ACL
Quidway S3000-EI Series Ethernet Switches Chapter 1 ACL Commands
Huawei Technologies Proprietary
1-2
You can use the acl command to create an ACL and specify its name with “acl-name”
and its type with the keywords “advanced”, ”basic”, ”link”, or "user”. For both
numbered and named ACL, you can use the rule command to add rules for them after
entering ACL view. (Use the quit command to exit ACL view.) An ACL may contain
multiple rules and the traffic classification rules concern different ranges, which brings
forward the issue of match order when a data packet matches more than one rule.
Using the match-order parameter, you can configure to follow the user configuration
order (as defaulted) or depth-first order (matching the rule with smaller range first) to
match the rules. After specified the match order of an ACL, you cannot change it,
unless delete all its rules and specify the order again. Note that, the match order of
ACL can only be effective in the case ACL is cited by software to filter and classify
data.
Due the chips installed, the hardware match order of ACL’s sub-rule is different in
different switch models. The details are listed in the following table.
Table 1-1 Hardware match order of ACL’s sub-rule
Switch Hardware match order of ACL’s sub-rule
S3000-EI series
An ACL is configured with multiple sub-rules. The
latest sub-rule will be matched first.
For related configurations, refer to the command rule.
Example
# Configure to follow depth-first order to match the rules of ACL 2000.
[Quidway] acl number 2000 match-order auto
1.1.2 display acl config
Syntax
display acl config { all | acl-number | acl-name }
View
Any view
Parameter
all: Configures to display all the ACLs (including numbered and named ACLs).
acl-number: Specifies the sequence number of the ACL to be displayed with a number
between 2000 and 3999.
acl-name: Specifies the name of the ACL to be displayed with a character string
starting with English letters ([a-z, A-Z]) only and excluding space or quotation mark.