ACLs are a common tool for matching routes. ACLs are classified into multiple types based on ACL rule functions. An ACL can be identified by a…

In Huawei's Versatile Routing Platform (VRP), Access Control Lists (ACLs) are categorized and identified by number ranges. The number range from 4000 to 4999 is specifically allocated for Layer 2 ACLs. These ACLs are used to filter data frames based on Layer 2 information, such as source MAC address, destination MAC address, 802.1p priority, and VLAN ID. This allows for granular traffic control at the data link layer within a local area network.

A. User-defined ACLs use the number range 5000-5999 to match packets against user-defined rule formats, which are more flexible than standard ACLs.

B. Basic ACLs use the number range 2000-2999 and filter packets based only on the source IP address.

D. Advanced ACLs (Advance is a common typo) use the number range 3000-3999 and can filter packets based on source/destination IP, protocol type, and port numbers.

1. Huawei HedEx Documentation for S Series Switches: In the S12700 V200R019C10 Configuration Guide - Security

Section "ACL Configuration > ACL Overview > ACL Classification"

the document explicitly states: "Layer 2 ACL (number range: 4000-4999)". This guide details the classification of ACLs by number.

2. Huawei AR Router Documentation: The AR100

AR120

AR150

AR160

AR200

AR1200

AR2200

AR3200

and AR3600 V300R019C10 Configuration Guide - Security

Section "ACL Configuration > ACL Overview > ACL Classification"

provides a table that maps ACL types to their number ranges

confirming that 4000-4999 is for Layer 2 ACLs.

3. HCIP-Datacom-Core Technology V1.0 Training Material: In the official courseware

the module on "ACL Principles and Configuration" details the different types of ACLs and their corresponding number ranges. The material specifies that Layer 2 ACLs are identified by the 4000-4999 range.