Hi,
Run system-view
The system view is displayed.
Create a basic ACL. You can create a numbered or named ACL.
By default, no ACL exists on the device.
If the parameter match-order is not specified when you create an ACL, the default matching order config is used. For details about the ACL matching order, see ACL Matching.
The default step of a created
ACL is 5. If the default step cannot meet your ACL configuration
requirements, you can change the step value. For details about the step,
see ACL Increment; for configuration of the step, see Adjusting the Increment of ACL Rules.
Run the acl [ number ] acl-number [ match-order { auto | config } ] command to create a numbered basic ACL (2000-2999) and enter the basic ACL view.
Run the acl name acl-name { basic | acl-number } [ match-order { auto | config } ] command to create a named basic ACL and enter the basic ACL view.
(Optional) Run description text
A description is configured for the ACL.
By default, an ACL has no description.
The ACL description helps you understand and remember the functions or purpose of an ACL.
Run rule [ rule-id ] { deny | permit } [ source { source-address source-wildcard | any } | fragment | logging | time-range time-name | { vpn-instance vpn-instance-name | public } ] *
Rules are configured in the basic ACL.
In this example, only one permit
or deny rule is configured. In actual configuration, you can configure
multiple rules and decide the matching order of the rules according to
service requirements.
For details about the time range, source IP address and its wildcard mask, and IP fragment information, see ACLs Supported by Switches and Common Matching Conditions. Configuring rules for a basic ACL provides a rule configuration example.
(Optional) Run rule rule-id description description
A description is configured for the ACL rules.
By default, an ACL rule has no description.
The ACL rule description helps you understand and remember the functions or purpose of an ACL rule.
You can configure
descriptions for only the existing rules on the device. That is, you
cannot configure a description for a rule before creating it.
More details here.
I hope it helps.
