CE series switch ACL resources

Run the display acl resource [ slot <slot-id> ] command in any view on an S series switch to check the ACL resource usage.

An ACL filters packets based on rules. A switch with an ACL configured matches packets based on the rules to obtain the packets of a certain type, and then decides to forward or discard these packets according to the policies used by the service module to which the ACL is applied. The S series switch supports basic ACL (2000-2999), advanced ACL (3000-3999), Layer 2 ACL (4000-4999), user-defined ACL (5000-5999), USER acl (6000-9999), basic ACL6 (2000-2999), and advanced ACL6 (3000-3999). For more information about the ACL feature supported by S series switches, except S1700, click S1720&S2700&S3700&S5700&S6700&S7700&S9700 Common Operation Guide or S1720&S2700&S3700&S5700&S6700&S7700&S9700 Typical Configuration Examples.

CE series switches do not support reflective ACLs.

Create a logical resource template and use it to allocate logical resources to a VS.
system-view
[~HUAWEI] admin
[~HUAWEI-admin] resource-template temp1 //Create a resource template.
[*HUAWEI-admin-template:temp1] resource u4route upper-limit 50000 //Configure the resource specification.
[*HUAWEI-admin-template:temp1] resource mpls enable
[*HUAWEI-admin-template:temp1] quit
[*HUAWEI-admin] virtual-system vs1
[*HUAWEI-admin-vs:vs1] assign resource-template temp1 //Load the resource template on the VS.
[*HUAWEI-admin-vs:vs1] commit