Rh3c acl的配置

标准访问列表命令格式如下：
acl [match-order config|auto]           ；默认前者顺序匹配。
rule [normal|special]{permit|deny} [source source-addr source-wildcard|any]

例：
[Quidway]acl 10
[Quidway-acl-10]rule normal permit source 10.0.0.0 0.0.0.255
[Quidway-acl-10]rule normal deny source any

扩展访问控制列表配置命令
1、配置TCP/UDP协议的扩展访问列表：
rule {normal|special}{permit|deny}{tcp|udp}source {|any}destination |any}
[operate]
2、配置ICMP协议的扩展访问列表：
rule {normal|special}{permit|deny}icmp source {|any]destination {|any]
[icmp-code] [logging]
3、扩展访问控制列表操作符的含义
equal portnumber                                        ；等于
greater-than portnumber                                 ；大于
less-than portnumber                                    ；小于
not-equal portnumber                                    ；不等
range portnumber1 portnumber2                           ；区间

举例
[Quidway]acl 101
[Quidway-acl-101]rule deny souce any destination any
[Quidway-acl-101]rule permit icmp source any destination any icmp-type echo
[Quidway-acl-101]rule permit icmp source any destination any icmp-type echo-reply
[Quidway]acl 102
[Quidway-acl-102]rule permit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0
[Quidway-acl-102]rule deny ip source any destination any
[Quidway]acl 103
[Quidway-acl-103]rule permit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp
[Quidway-acl-103]rule permit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www
[Quidway]firewall enable
[Quidway]firewall default permit|deny
[Quidway]int e0
[Quidway-Ethernet0]firewall packet-filter 101 inbound|outbound