3com 5500-ei pwr Reference Guide

Page of 1314
 
1-25 
In this example, the 32-byte rule string occupies eight offset units: 4 to 7 (Offset2), 8 to 11 (Offset3), 12 
to 15 (Offset4), 16 to 19 (Offset5), 20 to 23 (Offset1), 24 to 27 (Offset7), 28 to 31 (Offset8), and 32 to 35 
(Offset6), as shown in 
. The rule can be assigned successfully. 
# Create user-defined ACL 5003 and define rule 1, specifying a 32-byte rule string, a rule mask of all Fs, 
and an offset of 24. Then, apply the ACL to Ethernet 1/0/2.  
[Sysname] acl number 5003 
[Sysname-acl-user-5003] rule 1 deny 
1234567890123456789012345678901234567890123456789012345678901234 
ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 24 
[Sysname-acl-user-5003] quit 
[Sysname] interface Ethernet 1/0/2 
[Sysname-Ethernet1/0/2] packet-filter inbound user-group 5003 
Applying Acl 5003 rule 1 failed! 
 Reason: This type of ACL rule is not supported by the command which is attempting to use 
the ACL!(Ethernet1/0/2) 
In this example, the 32-byte rule string does not comply with the rule that a user-defined rule string can 
contain up to eight mask offset units, and any two offset units cannot belong to the same offset group. 
The ACL cannot be assigned.  
After completing the above configuration, you can use the display acl command to view the 
configuration information of the ACLs. 
rule comment 
Syntax 
rule rule-id comment text 
undo rule rule-id comment 
View 
Advanced ACL view, Layer 2 ACL view, user-defined ACL view 
Parameters 
rule-id: ID of the ACL rule, in the range of 0 to 65534. 
text: Comment for the ACL rule, a string of 1 to 127 characters. Blank spaces and special characters 
are acceptable. 
Description 
Use the rule comment command to define a comment for the ACL rule.  
Use the undo rule comment command to remove the comment defined for the ACL rule.  
You can give rules comments to provide relevant information such as their application purposes and the 
ports they are applied to, so that you can easily identity and distinguish ACL rules by their comments. 
By default, an ACL rule has no comment. 
Before defining a comment for an ACL rule, make sure that the ACL rule exists.