1-2Category ACL number Matching criteriaAdvanced IPv4 ACL 3000 to 3999Source IP address, destinationIP address, protocol carriedover IP, and other Layer 3 orLayer 4 protocol headerinformationEthernet frame header ACL 4000 to 4999Layer 2 protocol header fieldssuch as source MAC address,destination MAC address,802.1p priority, and link layerprotocol typeIPv4 ACL NamingWhen creating an IPv4 ACL, you can specify a unique name for it. Afterwards, you can identify the ACLby its name.An IPv4 ACL can have only one name. Whether to specify a name for an ACL is up to you. Aftercreating an ACL, you cannot specify a name for it, nor can you change or remove its name.The name of an IPv4 ACL must be unique among IPv4 ACLs. However, an IPv4 ACL and an IPv6 ACLcan share the same name.IPv4 ACL Match OrderAn ACL may consist of multiple rules, which specify different matching criteria. These criteria may haveoverlapping or conflicting parts. The match order is for determining how packets should be matchedagainst the rules.Two match orders are available for IPv4 ACLs:z config: Packets are compared against ACL rules in the order the rules are configured.z auto: Packets are compared against ACL rules in the depth-first match order.The term depth-first match has different meanings for different types of ACLs:Depth-first match for a basic IPv4 ACLThe following shows how your device performs depth-first match in a basic IPv4 ACL:1) Sort rules by source IP address wildcard mask and compare packets against the rule configuredwith more zeros in the source IP address wildcard.2) If two rules are present with the same number of zeros in their source IP address wildcards,compare packets against the rule configured first.
