Nortel 2350 用户指南
418 Configuring and managing security ACLs
NN47250-500 (320657-F Version 02.01)
Determining the ACE order
The set security acl command creates a new entry in the edit buffer and appends the new entry as a rule at the end of an
ACL, unless you specify otherwise. The order of ACEs is significant, because the earliest ACE takes precedence over
later ACEs. To place the ACEs in the correct order, use the parameters before editbuffer-index and modify edit-
buffer-index. The first ACE is number 1.
ACL, unless you specify otherwise. The order of ACEs is significant, because the earliest ACE takes precedence over
later ACEs. To place the ACEs in the correct order, use the parameters before editbuffer-index and modify edit-
buffer-index. The first ACE is number 1.
To specify the order of the commands, use the following parameters:
•
before editbuffer-index inserts an ACE before a specific location.
•
modify editbuffer-index changes an existing ACE.
If the security ACL you specify when creating an ACE does not exist when you enter set security acl ip, the specified
ACL is created in the edit buffer. If the ACL exists but is not in the edit buffer, the ACL reverts, or is rolled back, to the
state when its last ACE was committed, but it now includes the new ACE.
ACL is created in the edit buffer. If the ACL exists but is not in the edit buffer, the ACL reverts, or is rolled back, to the
state when its last ACE was committed, but it now includes the new ACE.
.