ACL Commands 229DescriptionUse the rule command to add a rule to the ACL.Use the undo rule command to delete a rule from the ACL.You can define multiple rules for an ACL. Only the specified rules will be deleted ifyou select parameters in the undo rule command.If you redefine an existing rule, the newly configured option automaticallyoverwrites the corresponding option of the original rule, and the option not beingredefined remains. For example:With the original rule 0:[acl number 2000]rule 0 permit source 10.1.1.1 0 time-range 3Comwhen redefine it as follows:[acl number 2000]rule 0 permit source 10.1.1.2 0 fragmentit becomes:rule 0 permit source 10.1.1.2 0 fragment time-range 3ComThat is, the source option is replaced with 10.1.1.2, the fragment option whichthe original rule does not contain is added, and the time-range 3Com optionwhich the original rule contains is reserved.c CAUTION:■ If you want to replace an existing rule, you are recommended to use the undocommand to delete the original rule fist, and then reconfigure the rule. Thismakes sure the unwanted options are completely removed.■ If you configure a rule without providing the rule number, the system willautomatically generate a new rule if the rule is not identical to any existingrules.■ The rule with the specified bt-flag cannot be used in the traffic-redirectcommand.Related command: acl.Example# Add a rule to the advanced ACL. system-viewSystem View: return to User View with Ctrl+Z.[SW8800]acl number 3000[3Com-acl-adv-3000] rule 1 permit tcp established source 1.1.1.1 0destination 2.2.2.2 0time-range Syntaxtime-range time-name { start-time to end-time days-of-the-week [ fromstart-time start-date ] [ to end-time end-date ] | from start-time start-date [ toend-time end-date ] | to end-time end-date }
