216 CHAPTER 16: ACL C OMMANDSUsing the acl command, you can create an ACL named "acl-name". And the typeof this ACL is decided by keywords: "advanced", "basic" or "link". Afterentering a corresponding ACL view, no matter the ACL is identified by a numberor a name, you can use the rule command to create rules of this named ACL (youcan exit ACL view by using the quit command).You can select the match-order keyword to specify whether to match ACL rulesin configuration order or depth-first order (matching the rules with smaller rangefirst). By default, the former mode is selected. You cannot modify the matchingorder once you specify it. To do so, you have to delete all rules of the ACL andspecify a matching order for it again.n The user-defined ACL matching order takes effect only when multiple rules of oneACL are applied at the same time. For example, an ACL has two rules. If the tworules are not applied simultaneously, even if you configure the matching order tobe depth first, the switch still matches them according to their application order.If one rule is a subset of another rule in an ACL, it is recommended to apply therules according to the range of the specified packets. The rule with the smallestrange of the specified data packets is applied first, and then other rules are appliedbased on this principle.If one ACL is used, you cannot use the undo acl all command to delete any ACL.Related command: rule.Example# Specify depth first order as the match order of number 2000 ACL. system-viewSystem View: return to User View with Ctrl+Z.[SW8800] acl number 2000 match-order autodisplay acl config Syntaxdisplay acl config { all | acl-number | acl-name }ViewAny viewParameterall: Displays all ACLs (both number- and name-identified ones).acl-number: Serial number of the ACL to be displayed, in the range of 2000 to4999.acl-name: Name of the ACL to be displayed. String parameter which must startwith an English letter ([a-z, A-Z]) and no space is allowed in it.DescriptionUse the display acl config command to view the configuration details of theACL, including all the rules, their serial numbers, quantities and number of bytesof matched packets.
