1-22
After completing the above configuration, you can use the
display acl
command to view the
configuration information of the ACLs.
rule (for user-defined ACLs)
Syntax
rule
[
rule-id
] {
deny
|
permit
} [
rule-string
rule-mask
offset
] &<1-8> [
time-range
time
-
name
]
undo
rule
rule-id
View
User-defined ACL view
Parameters
rule-id
: ID of an ACL rule, in the range of 0 to 65534.
rule-string
: User-defined ACL rule string. It must be an even hexadecimal number comprising 2 to 160
hexadecimal numerals.
rule-mask
: User-defined mask of the ACL rule. It must be an even hexadecimal number containing 2 to
160 hexadecimal numerals and be of the same length as that of the
rule-string
argument. This
argument is used to perform the logical AND operations with packets.
offset
: Mask offset of the rule. It specifies a position in packets, from which the logical AND operation is
to be performed. It ranges from 0 to 79 (in bytes).
Note that:
z
The maximum value of the mask offset of the rule becomes one byte less when the
rule-string
argument has two more hexadecimal numerals. For example, when the
rule-string
contains two
hexadecimal numerals, the maximum value of
offset
is 79 bytes; when the
rule-string
contains four
hexadecimal numerals, the maximum value of
offset
is 78 bytes, and so on.
z
The valid length of the mask offset is 128 hexadecimal numerals (64 bytes). For example, assume
that you specify a rule string of
aa
and set its offset to 2. If you continue to specify a rule string of
bb
,
its offset must be in the range from 3 to 65 bytes. If you set the offset of the rule string
aa
to 3, the
offset of the rule string
bb
must be in the range of 4 to 66 bytes, and so on. However, the offset of
the rule string
bb
cannot be greater than 79 bytes.
z
As shown in
Table 1-16
, the hardware rule of the Switch 5500-EI series logically divides the rule
mask offset of a user-defined string into multiple offset units, each of which is 4–byte long.
Available offset units fall into eight groups, which are numbered from Offset1 to Offset8.
z
With the Switch 5500-EI series, a user-defined rule string may or may not contain spaces and can
be up to 32 bytes in length. It can occupy up to eight mask offset units and any two of the offset
units cannot belong to the same offset group. Otherwise, the ACL cannot be applied successfully.
Table 1-16
Offset units of a user-defined rule string
Offset unit
Offset1 Offset2 Offset3 Offset4 Offset5 Offset6 Offset7 Offset8
0 to 3
4 to 7
8 to 11
12 to 15
16 to 19
20 to 23
24 to 27
28 to 31
Summary of Contents for 5500-EI PWR
Page 43: ...2 6...
Page 76: ...1 17...
Page 228: ...ii stp transmit limit 1 44 vlan mapping modulo 1 45 vlan vpn tunnel 1 46...
Page 477: ...5 24 Sysname vlan 2 Sysname vlan2 service type multicast...
Page 503: ...2 3 System View return to User View with Ctrl Z Sysname dot1x url http 192 168 19 23...
Page 519: ...iii...
Page 597: ...2 2 security policy server 192 168 0 1 user name format without domain...
Page 648: ...1 9 Examples Clear static ARP entries Sysname reset arp static...
Page 663: ...4 3 Sysname resilient arp interface vlan interface 2...
Page 767: ...1 28 From 12 00 Jan 1 2008 to 12 00 Jun 1 2008...
Page 1111: ...ii xmodem get 3 18...
Page 1314: ...A 44 Z...
