[FAQ]How Can I Check the Order in Which ACL Rules Take Effect?

Created: Dec 29, 2015 09:37:19Latest reply: Dec 29, 2015 09:37:32 1185 1 0 0

Run the display acl { acl-number | name acl-name | all } or display acl ipv6 { acl6-number | name acl6-name | all } command in any view or the display this command in the ACL view to check the order in which ACL rules take effect.

ACL Type

Order

ACL in config mode

The rules with smaller IDs take effect earlier than the rules with larger IDs.

ACL in auto mode

The rules with smaller IDs take effect earlier than the rules with larger IDs.

ACL6 in config mode

The rules with smaller IDs take effect earlier than the rules with larger IDs.

ACL6 in auto mode

The rules in front lines take effect earlier than the rules in latter lines. The rules may not be arranged in the ascending order of rule IDs.

  • x
  • convention:

who_knows     Created Dec 29, 2015 09:37:32 Helpful(0) Helpful(0)

When multiple traffic policies using ACLs are applied to a device, if a packet matches the ACL rules in different traffic policies, the matching order of the ACL rules depends on the processing mechanism of the traffic policy module. For details, see Producnt Document -> Configuration Guide -> QoS.

  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top