1-12be the greatest rule number plus one. If the current greatest rule number is 65534, however, thesystem will display an error message and you need to specify a number for the rule.z The content of a modified or created rule cannot be identical with the content of any existing rule;otherwise the rule modification or creation will fail, and the system prompts that the rule alreadyexists.z With the auto match order specified, the newly created rules will be inserted in the existent ones bydepth-first principle, but the numbers of the existent rules are unaltered.Examples# Create basic ACL 2000 and define rule 1 to deny packets whose source IP addresses are192.168.0.1. system-viewSystem View: return to User View with Ctrl+Z.[Sysname] acl number 2000[Sysname-acl-basic-2000] rule 1 deny source 192.168.0.1 0[Sysname-acl-basic-2000] quit# Create basic ACL 2001 and define rule 1 to deny packets that are non-tail fragments.[Sysname] acl number 2001[Sysname-acl-basic-2001] rule 1 deny fragment[Sysname-acl-basic-2001] quit# Create basic ACL 2002 and define rule 1 to deny all packets during the period specified by time rangetrname.[Sysname] acl number 2002[Sysname-acl-basic-2002] rule 1 deny time-range trnameAfter completing the above configuration, you can use the display acl command to view theconfiguration information of the ACLs.rule (for Advanced ACLs)Syntaxrule [ rule-id ] { deny | permit } protocol [ rule-string ]undo rule rule-id [ destination | destination-port | dscp | fragment | icmp-type | precedence |source | source-port | time-range | tos ]*ViewAdvanced ACL viewParametersParameters of the rule commandrule-id: ACL rule ID, in the range of 0 to 65534.deny: Drops the matched packets.permit: Permits the matched packets.
