Operation Manual – ACLH3C S3610&S5510 Series Ethernet Switches Chapter 2 IPv4 ACL Configuration2-5In addition, advanced IPv4 ACLs allow you to filter packets based on three prioritycriteria: type of service (ToS), IP precedence, and differentiated services codepoint(DSCP) priority.Advanced IPv4 ACLs are numbered in the range 3000 to 3999. Compared with basicIPv4 ACLs, they allow of more flexible and accurate filtering.2.3.1 Configuration PrerequisitesIf you want to reference a time range to a rule, define it with the time-range commandfirst.2.3.2 Configuration ProcedureFollow these steps to configure an advanced IPv4 ACL:To do… Use the command… RemarksEnter system view system-view ––Create and enteradvanced IPv4 ACL viewacl number acl-number[ name acl-name ][ match-order { auto |config } ]RequiredThe default match order isconfig.If you specify a name foran IPv4 ACL whencreating the ACL, you canuse the acl nameacl-name command toenter the view of the ACLlater.Create or modify a rulerule [ rule-id ] { deny |permit } protocol[ destination { dest-addrdest-wildcard | any } |destination-portoperator port1 [ port2 ] |dscp dscp | established |fragment | icmp-type{ icmp-type icmp-code |icmp-message } | logging| precedence precedence| reflective | source{ sour-addr sour-wildcard |any } | source-portoperator port1 [ port2 ] |time-range time-name |tos tos ] *RequiredTo create multiple rules,repeat this step.Set a rule numbering step step step-value OptionalThe default step is 5.
