H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 415)

41-7
Copying an IPv4 ACL
This feature allows you to copy an existent IPv4 ACL to generate a new one, which is of the same type
and has the same match order, match rules, rule numbering step and descriptions as the source IPv4
ACL.
Configuration Prerequisites
Make sure that the source IPv4 ACL exists while the destination IPv4 ACL does not.
Configuration Procedure
Follow these steps to copy an IPv4 ACL:
To do… Use the command… Remarks
Enter system view system-view —
Copy an existing IPv4 ACL to
generate a new one of the same
type acl copy { source-acl-number | name
source-acl-name } to { dest-acl-number | name
dest-acl-name }
Required
z
The source IPv4 ACL and the destination IPv4 ACL must be of the same type.
z
The generated ACL does not take the name of the source IPv4 ACL.
Displaying and Maintaining IPv4 ACLs
To do... Use the command… Remarks
Display information about a
specified or all IPv4 ACLs display acl { acl-number | all |
name acl-name }
Available in any view
Display information about ACL
uses of a switch
display acl resource Available in any view
Display the configuration and state
of a specified or all time ranges display time-range { time-name |
all }
Available in any view
Clear statistics about a specified or
all IPv4 ACLs that are referenced
by upper layer software
reset acl counter { acl-number |
all | name acl-name }
Available in user view
IPv4 ACL Configuration Example
Network Requirements
As shown in Figure 41-1 , a company interconnects its departments through the AC.
Configure an ACL to deny access of all departments but the President’s office to the salary query server
during office hours (from 8:00 to 18:00) in working days.