1-8To do... Use the command... RemarksAssign a descriptionstring to the ACL rule rule rule-id comment text OptionalNo description by defaultAssign a descriptionstring to the ACL description text OptionalNo description by defaultNote that:z With the config match order specified for the advanced ACL, you can modify anyexistent rule. The unmodified part of the rule remains. With the auto match orderspecified for the ACL, you cannot modify any existent rule; otherwise the systemprompts error information.z If you do not specify the rule-id argument when creating an ACL rule, the rule will benumbered automatically. If the ACL has no rules, the rule is numbered 0; otherwise, thenumber of the rule will be the greatest rule number plus one. If the current greatest rulenumber is 65534, however, the system will display an error message and you need tospecify a number for the rule.z The content of a modified or created rule cannot be identical with the content of anyexisting rules; otherwise the rule modification or creation will fail, and the systemprompts that the rule already exists.z If the ACL is created with the auto keyword specified, the newly created rules will beinserted in the existent ones by depth-first principle, but the numbers of the existentrules are unaltered.Configuration example# Configure ACL 3000 to permit the TCP packets sourced from the network 129.9.0.0/16and destined for the network 202.38.160.0/24 and with the destination port number being80. system-view[Sysname] acl number 3000[Sysname-acl-adv-3000] rule permit tcp source 129.9.0.0 0.0.255.255 destination202.38.160.0 0.0.0.255 destination-port eq 80# Display the configuration information of ACL 3000.[Sysname-acl-adv-3000] display acl 3000Advanced ACL 3000, 1 ruleAcl's step is 1rule 0 permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0 0.0.0.255destination-port eq wwwConfiguring Layer 2 ACLLayer 2 ACLs filter packets according to their Layer 2 information, such as the source anddestination MAC addresses, VLAN priority, and Layer 2 protocol types.
