3com 5500-ei pwr Guia De Referência
1-11
Table 1-6 Parameters for basic IPv4 ACL rules
Parameters
Function
Description
source { sour-addr
sour-wildcard | any }
sour-wildcard | any }
Specifies a source address.
The sour-addr sour-wildcard
argument specifies a source IP
address in dotted decimal
notation. Setting the wildcard to
a zero indicates a host address.
The any keyword indicates any
source IP address.
argument specifies a source IP
address in dotted decimal
notation. Setting the wildcard to
a zero indicates a host address.
The any keyword indicates any
source IP address.
fragment
Indicates that the rule applies
only to non-tail fragments.
only to non-tail fragments.
––
time-range time-name
Specifies the time range in
which the rule takes effect.
which the rule takes effect.
time-name: specifies the name
of the time range in which the
rule is active; a string
comprising 1 to 32 characters.
of the time range in which the
rule is active; a string
comprising 1 to 32 characters.
sour-wildcard is the complement of the wildcard mask of the source subnet mask. For example, you
need to input 0.0.255.255 to specify the subnet mask 255.255.0.0.
Parameters of the undo rule command
rule-id: Rule ID, which must the ID of an existing ACL rule. You can obtain the ID of an ACL rule by
using the display acl command.
fragment: Removes the settings concerning non-tail fragments in the ACL rule.
source: Removes the settings concerning source address in the ACL rule.
time-range: Removes the settings concerning time range in the ACL rule.
Description
Use the rule command to define an ACL rule.
Use the undo rule command to remove an ACL rule or specified settings of an ACL rule.
To remove an ACL rule using the undo rule command, you need to provide the ID of the ACL rule. If no
other arguments are specified, the entire ACL rule is removed. Otherwise, only the specified
information of the ACL rule is removed.
Note that:
z
With the config match order specified for the basic ACL, you can modify any existent rule. The
unmodified part of the rule remains. With the auto match order specified for the basic ACL, you
cannot modify any existent rule; otherwise the system prompts error information.
z
If you do not specify the rule-id argument when creating an ACL rule, the rule will be numbered
automatically. If the ACL has no rules, the rule is numbered 0; otherwise, the number of the rule will