1-25In this example, the 32-byte rule string occupies eight offset units: 4 to 7 (Offset2), 8 to 11 (Offset3), 12to 15 (Offset4), 16 to 19 (Offset5), 20 to 23 (Offset1), 24 to 27 (Offset7), 28 to 31 (Offset8), and 32 to 35(Offset6), as shown in Table 1-16. The rule can be assigned successfully.# Create user-defined ACL 5003 and define rule 1, specifying a 32-byte rule string, a rule mask of all Fs,and an offset of 24. Then, apply the ACL to Ethernet 1/0/2.[Sysname] acl number 5003[Sysname-acl-user-5003] rule 1 deny1234567890123456789012345678901234567890123456789012345678901234ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 24[Sysname-acl-user-5003] quit[Sysname] interface Ethernet 1/0/2[Sysname-Ethernet1/0/2] packet-filter inbound user-group 5003Applying Acl 5003 rule 1 failed!Reason: This type of ACL rule is not supported by the command which is attempting to usethe ACL!(Ethernet1/0/2)In this example, the 32-byte rule string does not comply with the rule that a user-defined rule string cancontain up to eight mask offset units, and any two offset units cannot belong to the same offset group.The ACL cannot be assigned.After completing the above configuration, you can use the display acl command to view theconfiguration information of the ACLs.rule commentSyntaxrule rule-id comment textundo rule rule-id commentViewAdvanced ACL view, Layer 2 ACL view, user-defined ACL viewParametersrule-id: ID of the ACL rule, in the range of 0 to 65534.text: Comment for the ACL rule, a string of 1 to 127 characters. Blank spaces and special characters areacceptable.DescriptionUse the rule comment command to define a comment for the ACL rule.Use the undo rule comment command to remove the comment defined for the ACL rule.You can give rules comments to provide relevant information such as their application purposes and theports they are applied to, so that you can easily identity and distinguish ACL rules by their comments.By default, an ACL rule has no comment.Before defining a comment for an ACL rule, make sure that the ACL rule exists.
