In ACL, if you need to filter data packets based on the source IP address, destination IP address, port number and other information of the data packet, then the range of ACL numbers created is ().

Question

Options

• A5000~5999
• B3000~3999
• C20002999
• D4000~4999

• A
  8% (3)
• B
  72% (26)
• C
  14% (5)
• D
  6% (2)

Explanation

Option B (3000–3999) is correct because this range defines Advanced ACL in Huawei networking, which can match on source IP, destination IP, transport-layer port numbers, protocol type, and other Layer 3/4 fields - exactly what the question requires.

Why the distractors are wrong:

• A (5000–5999) - User-defined ACL, which filters on raw packet offsets and bit masks, not the named fields described.
• C (2000–2999) - Basic ACL, which can only match on source IP address; it cannot inspect destination IP or ports.
• D (4000–4999) - Layer 2 ACL, which filters on MAC addresses and other Layer 2 attributes, not IP or port information.

Memory tip: Think of the ranges as levels of sophistication - Basic (2000s) checks "who sent it," Advanced (3000s) checks "who, where, and how," Layer 2 (4000s) works below IP entirely, and User-defined (5000s) is a manual/custom approach. The more fields you need to match, the higher the ACL tier.

No community discussion yet for this question.