Huawei acl usage

Acl prepared substantially syntax:
acl 2000
deny rules: rule deny source ip wildcard address or network segment (i.e., inverted)
allows rules: rule permit source ip wildcard address or network segment (i.e., inverted)
matching rules: order match, matching stops, no match allowed by default.
Written in high-level ACL syntax:
acl 3000
refused to rule: rule deny protocol (tcp / udp / icmp / ip ) source IP address or network segment inverted destination ip address or network segment inverted destination-port eq port
allows rule: rule permit agreement (tcp / udp / icmp / ip ) source IP address or network segment address or the destination ip inverted inverted network port destination-port eq
ACL to Interface: an interface apply only one direction ACL
int Interface
traffic-filter outbound acl number

Guess you like

Origin blog.51cto.com/14383452/2406225
ACL