Increment Between ACLs

Definition

The increment between ACLs is the difference between ACL rule IDs automatically allocated by the system. For example, if the increment is set to 5, the rule IDs are generated in increments of 5 (beginning with 5), such as 5, 10, 15, and so on.

• If the increment value is changed, ACL rule IDs are automatically changed accordingly. For example, if you change the ACL increment from 5 to 2, the original rule IDs 5, 10, 15, and 20 will become 2, 4, 6, and 8.

  For the MQC service, if the increment is changed, ACL rules are deleted and re-delivered.

• The same happens if the increment is restored to the default value (5). For example, ACL rule group 3001 contains four rules with IDs being 2, 4, 6, and 8, and the increment is 2. After the ACL increment restores to the default value, the ACL rule IDs become 5, 10, 15, and 20.

Purpose

The increment value ensures there is a space between ACL rule IDs. This allows you to insert new rules between existing ACL rules and control the matching order of the ACL rules. For example, four rules are configured in the ACL rule group with rule IDs 5, 10, 15, and 20. To insert a new rule between rules 5 and 10 (the first and second rules), you can create rule 6, 7, 8, or 9.

In addition, you do not need to manually specify a rule ID when creating an ACL rule. The system will allocate the ACL rule with a rule ID, which is the sum of the current maximum ID and an increment value. For example, if the current maximum rule ID is 25 and the increment value is 5, the system will allocate the rule ID 30 to the new rule.