Method used to configure the mask in the ACL on the AR

1

Masks in ACL rules configured on the AR series routers and S series switches are wildcard masks. The wildcard mask is also called wildcard and is in dotted decimal notation. When the wildcard is converted to a binary value, the value 0 indicates that the bit is matched and the value 1 indicates that the bit is not matched. The value 0 or l of a binary value can be incontiguous. For example, the IP address is 192.168.1.169 and the wildcard is 0.0.0.172, representing that the network address is 192.168.1.x0x0xx01. The value of x can be 0 or 1.
Example:  system-view
[Huawei] acl number 2000
[Huawei-acl-basic-2000] rule permit source 192.168.32.1 0 //Permit only a specific IP address, with the wildcard mask of 0.0.0.0 that is abbreviated as 0.
[Huawei-acl-basic-2000] rule permit source 192.168.32.0 0.0.0.255 //Permit a network segment (mask 255.255.255.0), with the wildcard mask of 0.0.0.255. The wildcard mask is used in an ACL.

Other related questions:
How to configure the mask of an ACL on a WLAN device
For WLAN devices, masks (wildcards) must be specified for the source and destination IP addresses in ACL rules. The wildcard is in dotted decimal notation. In a binary wildcard, the value 0 indicates that this bit needs to be matched and the value 1 indicates that this bit does not need to be matched. 0s and 1s in a wildcard can be discontinuous. For example, the IP address 192.168.1.169 and the wildcard 0.0.0.172 represent address 192.168.1.x0x0xx01. x can be 0 or 1.

Configuring reverse masks for ACLs on the USG2000 and USG5000 series
Write out a mask with 0 and 1 and perform a reverse operation.

Configure address masks in ACLs on S series switches
For S series switches (except S1700 switches): An address mask must be specified when a source IP address or destination IP address is configured in an ACL rule. The address mask is the wildcard. In a binary wildcard, the value 0 indicates that this bit needs to be matched and the value 1 indicates that this bit does not need to be matched. 0s and 1s in a wildcard can be discontinuous. For example, the IP address 192.168.1.169 and the wildcard 0.0.0.172 represent address 192.168.1.x0x0xx01. x can be 0 or 1.

Method used to cancel alarm masking on the NMS
On the U2000, choose Fault > Settings > Mask Rule from the main menu. On the Mask Rule tab, select the desired masking policy, and deselect the Enable check box or delete the policy.

Methods of configuring the ACL for a WLAN device
ACL is essentially a packet filter whose rules act as the filter core. The device matches packets based on these rules to filter specific packets, and allows the filtered packets to pass or prevent them from passing according to the processing policies of the service module on which the ACL is applied. Currently, the ACLs on WLAN devices are classified into basic ACL (2000-2999), advanced ACL (3000-3999), Layer 2 ACL (4000-4999), user ACL (6000-9999), basic ACL 6 (2000-2999), and advanced ACL 6 (3000-3999). Fat APs do not support basic ACL 6 and advanced ACL 6. For more information about the ACL of Huawei WLAN devices, see: V200R005: ACL Configuration in AC6605&AC6005&ACU2(AC&FITAP) Product Documentation . V200R006: ACL Configuration in AC6605&AC6005&ACU2(AC&FITAP)Product Documentation.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top