Huawei ACL Default Matching Order: Config vs Auto

H12-811 By islever Editorial Last updated

ACL Principles and Configuration

Short answer

A TRUE: Huawei ACLs use configuration (config) order by default, evaluating rules by rule ID unless auto is explicitly configured.

Question

The configuration order (config) is the default matching order for ACL rules on Huawei devices.
  1. TRUE Correct Answer
  2. FALSE

Key Takeaways

It tests whether you know that Huawei ACL default match-order is config, and the trap is assuming auto is the default because its name suggests automatic behavior.

On Huawei devices, ACL rules are evaluated by default in configuration (config) order, not automatic order. This page confirms the statement is TRUE and explains how ACL match-order affects rule evaluation.

Common mistake: Choosing B (FALSE) because auto sounds like the default; Huawei uses config by default, so rules are evaluated in their configured rule-ID order unless match-order auto is explicitly set.

Expert Analysis

Where the order applies. When a packet reaches an interface with an ACL, the device does not evaluate every rule and combine the results. It walks the ACL rule list until one rule matches, and the permit or deny action of that first matching rule is applied. The question is therefore about the default order of that walk, not about ACL types or rule numbering.

Config vs auto. Huawei VRP supports two ACL matching orders: config and auto. In config order, rules are evaluated in the order they were configured, represented by ascending rule IDs. In auto order, the device evaluates rules according to their precision or depth, so more specific rules can be checked first regardless of configuration sequence. The default for an ACL is config, so unless you explicitly create or modify the ACL with match-order auto, the configuration order governs matching.

Why the statement is true. The statement says the configuration order (config) is the default matching order for ACL rules on Huawei devices. That is exactly the documented default. The correct option is therefore A (TRUE). A common distractor is to pick B because auto sounds like the automatic or default behavior; in Huawei ACLs, auto is the non-default, explicitly selected matching mode. The supplied comment makes the same point: Huawei supports auto and config, and the default is config.

What this means in practice. If you create rules without specifying an ID, Huawei normally assigns IDs in steps (for example 5, 10, 15), and under default config matching the first matching rule in that order wins. If you later need precision-based evaluation, you must choose auto; you should not assume the device silently reorders rules by specificity. This is why the answer turns on the match-order default rather than on the number of rules or the ACL number range.

Exam Strategy

When a true/false item names a default, check whether it uses the exact CLI keyword and whether that keyword is documented as the default, not the more intuitive-sounding alternative. For Huawei ACL questions, separate rule ordering from rule numbering: rule IDs usually increment by 5, but match-order decides evaluation. Seeing config and auto should trigger the fact that config is the default and auto must be explicitly configured.

Frequently Asked Questions

What is the difference between ACL match-order config and auto on Huawei devices?

Config evaluates rules in their configured or rule-ID order, while auto evaluates rules by precision or depth. The default is config, so auto must be explicitly selected when the ACL is created.

If I do not specify rule IDs in a Huawei ACL, how are rules ordered?

Huawei normally assigns rule IDs in increments of 5 (5, 10, 15, and so on). Under the default config match-order, the first matching rule in that ascending order determines the action.

Does the first matching ACL rule take effect on Huawei devices?

Yes. ACL matching is first-match; once a rule matches, later rules are not evaluated. This is why the default config order and the assigned rule IDs matter.

More H12-811 FAQ →

Community Votes

A
67%
B
21%
D
12%

67% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 1 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 1

  1. 4243643 👍 2 Answered A
    Huawei devices support two matching orders: automatic order (auto) and configuration order (config). The default matching order is config.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

← Back to H12-811 Study Guide