1-11 ACL Configuration CommandsACL Configuration CommandsaclSyntaxacl number acl-number [ match-order { auto | config } ]undo acl { all | number acl-number }ViewSystem viewParametersall: Specifies to remove all access control lists (ACLs).number acl-number: Specifies the number of an existing ACL or an ACL to be defined. ACL numberidentifies the type of an ACL as follows.z An ACL number in the range 2000 to 2999 identifies a basic ACL.z An ACL number in the range 3000 to 3999 identifies an advanced ACL. Note that 3998 and 3999cannot be configured because they are reserved for cluster management.z An ACL number in the range 4000 to 4999 identifies a layer 2 ACL.z An ACL number in the range 5000 to 5999 identifies a user-defined ACL.match-order: Specifies the match order for ACL rules. Following two match orders exist.z auto: Specifies to match ACL rules according to the depth-first rule.z config: Specifies to match ACL rules in the order they are defined.Note that the match-order keyword is not available to Layer 2 ACLs or user-defined ACLs. The matchorder for layer 2 ACLs or user defined ACLs can only be config. For details about the two match orders,refer to the relevant description in ACL Operation.DescriptionUse the acl command to define an ACL and enter the corresponding ACL view.Use the undo acl command to remove all the rules of the specified ACL or all the ACLs.By default, ACL rules are matched in the order they are defined.Only after the rules in an existing ACL are fully removed can you modify the match order of the ACL.In ACL view, you can use the rule command to add rules to the ACL.Related commands: rule.
