(Optional) Configuring an ACL Port Pool
Context
In typical ACL usage scenarios, such as QoS traffic policy, a user may need to match multiple port numbers. To implement policy-based routing using advanced ACL rules to match multiple source and destination port numbers, the user needs to specify all possible combinations of source and destination port numbers when configuring ACL rules. On large-scale networks, tens of millions of ACL rules may need to be manually configured to match the port numbers, which is not viable.
When an ACL rule needs to match multiple source and destination port numbers, you need to configure this function twice to create an ACL source port pool and an ACL destination port pool separately.
Procedure
- Run system-view
The system view is displayed.
- Run acl port-pool pool-name
An ACL port pool is created, and the ACL port pool view is displayed.
- Run any of the following commands:
- eq begin-port-number
- gt begin-port-number
- lt end-port-number
- range begin-port-number end-port-number
Port numbers are added to the ACL port pool.
- Run commit
The configuration is committed.