HP Moonshot-45XGc Guía de usuario descargar pdf (Pagina 20)

• 4000 to 4999 for Ethernet frame header ACLs. You cannot specify an Ethernet frame header ACL

if the ipv6 keyword is specified.

• 5000 to 5999 for user-defined ACLs. You cannot specify a user-defined ACL if the ipv6 keyword is

specified.

name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to

63 characters. It must start with an English letter.

inbound: Filters incoming packets.

outbound: Filters outgoing packets.

hardware-count: Enables counting ACL rule matches performed in hardware. This keyword enables

match counting for all rules in an ACL, and the counting keyword in the rule command enables match

counting specific to rules. If the hardware-count keyword is not specified, rule matches for the ACL are

not counted.

Examples

# Apply IPv4 basic ACL 2001 to filter incoming traffic on FortyGigE 1/1/1, and enable counting ACL

rule matches performed in hardware.

<Sysname> system-view

[Sysname] interface fortygige 1/1/1

[Sysname-FortyGigE1/1/1] packet-filter 2001 inbound hardware-count

Related commands

• display packet-filter

• display packet-filter statistics

• display packet-filter verbose

packet-filter default deny

Use packet-filter default deny to set the packet filtering default action to deny. The packet filter denies

packets that do not match any ACL rule.

Use undo packet-filter default deny to restore the default.

Syntax

packet-filter default deny

undo packet-filter default deny

Default

The packet filter permits packets that do not match any ACL rule.

Views

System view

Predefined user roles

network-admin

Usage guidelines

The packet filter applies the default action to all ACL applications for packet filtering. The default action

appears in the display command output for packet filtering.

1 2 ... 15 16 17 18 19 20 21 22 23 24 25 ... 123 124

Sin comentarios

HP Moonshot-45XGc Guía de usuario Pagina 20