3com 8807 Reference Guide

Page of 1099
VLAN-ACL Configuration Commands
289
3999. acl-name: Name of the ACL, which must be a character string starting with 
an English letter (a-z or A-Z), and without any space in it.
rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not 
specified, all subitems of ACL will be activated.
system-index index: Specifies the system index value of the rule which will be 
indexed during operation. After delivering a rule, the system automatically assigns 
a globally unique index value to the rule. When using this command to deliver a 
rule, you can also specify a system index value for the rule, but the value may 
change while the system is running. In general, you are not recommended to 
specify this parameter manually.
tc-index index: Traffic adjustment index value. If you configure the same index 
value for different ACL rules when configuring traffic statistics, the switch will 
make statistics of these traffics.
Description
Use the traffic-statistic command to activate an ACL and run traffic statistics for 
the matching data flow in VLAN (only available for the permit rules in the ACL).
Use the undo traffic-statistic command to cancel traffic statistics.
The statistics information contains the hardware matching times in packet 
forwarding.
Example
# In VLAN 2, run traffic statistics for the packets which match the permit rules in 
ACL 2000.
[3Com-vlan2] traffic-statistic inbound ip-group 2000 
port can-access vlan-acl
Syntax
port can-access vlan-acl vlan vlan-id
View
Ethernet port view
Parameter
vlan-id: VLAN ID, in the range of 1 to 4,094.
Description
Use the port can-access vlan-acl command to synchronize VLAN-ACL 
configuration of the specified VLAN to the port.
When being added to a VLAN, a port automatically synchronizes VLAN-ACL 
configuration of the VLAN. The synchronization fails if system resources are not 
enough. In this case, you can delete part of configuration of the card and then use 
this command to manually synchronize the ACL rules applied to the VLAN to the 
specified port.