3Com 5500G-EI - Page 288

288 CHAPTER 8: USING QOS/ACL COMMANDS
icmp-type type code : Appears when protocol is icmp. type code specifies an
ICMP packet.
type represents the type of ICMP packet, notated by a character or
a number which ranges from 0 to 255;
code represents ICMP code, which appears
when the protocol is “icmp” and the type of packet is not notated by a character,
ranging from 0 to 255.
established: Means that it is only effective to the first SYN packet established by
TCP, appears when protocol is tcp.
precedence precedence : IP predence, can be a name or a number ranging from 0
to 7.
tos tos : ToS (Type of Service) value, can be a name or a number ranging from 0 to
15. Packets can be classified according to TOS value.
dscp dscp : DSCP (Differentiated Services Code Point) value, can be a name or a
number ranging from 0 to 63. Packets can be classified according to DSCP value.
fragment: Means this rule is only effective for fragment packets and is ignored for
non-fragment packets.
Parameters specific to Layer 2 ACL:
source { source-vlan-id | source-mac-addr source-mac-wildcard }* : The
source information of a packet,
source-vlan-id represents source VLAN of the
packet,
source-mac-addr source-mac-wildcard represents source MAC address
of the packet. For example, if you set
source-mac-wildcard to 0-0-ffff, it means
that you will take the last 16 bits of source MAC address as the rule of traffic
classification.
dest { dest-vlan-id | dest-mac-addr dest-mac-wildcard }* : The
destination information of a packet:
dest-mac-addr dest-mac-wildcard
represents the the packet’s destination MAC address. For example, if you set
source-mac-wildcard to 0-0-ffff, it means that you will take the last 16 bits of
source MAC address as the rule of traffic classification.
type protocol-type protocol-type-mask : Protocol type carried by the Ethernet
frame.
lsap lsap-type lsap-type-mask : lsap type carried by the Ethernet frame.
Description
Use the rule command to add a subrule to an ACL.
Use the undo rule command to cancel a subrule from an ACL.
You can define several subrules for an ACL. If you include parameters when using
the
undo rule command, the system only deletes the corresponding content of
the subrule.
For related configurations, refer to command acl.
Example
Add a subrule to an advanced ACL: