修改前, ACL编号按step 1步长,这时想在第2条前面插入1条是实现不了的,会将原来的第2条覆盖掉
bash
<H3C-12510>dis acl 3600
Advanced ACL 3600, named -none-, 21 rules,
ACL's step is 5
rule 1011 deny tcp source 169.254.207.187 0 destination-port eq 22
rule 1012 permit ip destination 169.254.203.235 0
rule 1013 permit ip destination 169.254.203.233 0
rule 1014 permit ip destination 169.254.203.101 0
rule 1015 permit ip destination 169.254.205.23 0
rule 1016 permit ip destination 169.254.205.20 0
how to
指定步长,重新排序 进入acl 指定步长, 范围是1-20
实际修改
bash
[H3C-12510]acl number 3600
[H3C-12510-acl-adv-3600]step ?
INTEGER<1-20> Specify value of step
[H3C-12510-acl-adv-3600]step 10
[H3C-12510-acl-adv-3600]dis this
#
acl number 3600
step 10
rule 0 deny tcp source 169.254.207.187 0 destination-port eq 22
rule 10 permit ip destination 169.254.203.235 0
rule 20 permit ip destination 169.254.203.233 0
rule 30 permit ip destination 169.254.203.101 0
rule 40 permit ip destination 169.254.205.23 0
rule 50 permit ip destination 169.254.205.20 0
rule 60 permit ip destination 169.254.205.19 0
rule 70 permit ip destination 169.254.205.24 0