H3C S3100 Series Command Manual

1-20
Table 1-16 Layer 2 ACL rule information
Parameters Type Function Description
format-type
Link layer
encapsulation
type
Specifies the link
layer
encapsulation
type in the rule
This argument can be 802.3/802.2,
802.3, ether_ii, or snap.
lsap lsap-code
lsap-wildcard
lsap field
Specifies the
lsap field for the
ACL rule
lsap-code: Encapsulation format of
data frames, a 16-bit hexadecimal
number.
lsap-wildcard: Mask of the lsap
value, a 16-bit hexadecimal number
used to specify the mask bits.
source
{ source-mac-addr
source-mask | vlan-id
| vlan operator
vlan-id1 [ vlan-id2 ] }*
Source MAC
address
information or
source VLAN
information
Specifies the
source MAC
address range or
source VLAN
range for the
ACL rule
source-mac-addr: Source MAC
address, in the format of H-H-H.
source-mac-mask: Mask of the
source MAC address, in the format
of H-H-H.
vlan-id, vlan-id1, vlan-id2: Source
VLAN ID, in the range of 1 to 4,094.
The value of operator can be lt (less
than), gt (greater than), eq (equal
to), neq (not equal to) or range
(within the range of). Only the range
operator requires two port numbers
as the operands. Other operators
require only one port number as the
operand.
With the range operator, the value
of vlan-id2 does not need to be
greater than that of vlan-id1
because the device can
automatically judge the value range.
Note that if you specify a
combination of lt 1 or gt 4093, the
device will convert it to eq 0 or eq
4094.
dest dest-mac-addr
dest-mac-mask
Destination MAC
address
information
Specifies the
destination MAC
address range
for the ACL rule
dest-mac-addr: Destination MAC
address, in the format of H-H-H.
dest-mac-mask: Mask of the
destination MAC address, in the
format of H-H-H.
cos cos
Priority
Specifies the
802.1p priority of
the rule
cos: VLAN priority, in the range of 0
to 7.
c-tag-vlan
c-tag-vlan-begin [ to
c-tag-vlan-end ]
Inner VLAN
information
Specifies the
inner VLAN(s) of
the rule
c-tag-vlan-begin, c-tag-vlan-end:
VLAN ID, in the range of 1 to 4094.
This keyword and argument
combination is usually used in
cooperation with the QinQ function.
For information about QinQ, refer to
VLAN-VPN Operation.
time-range
time-name
Time range
information
Specifies the
time range in
which the rule
takes effect.
time-name: specifies the name of
the time range in which the rule is
active; a string comprising 1 to 32
characters.

H3C S3100 Series Specifications

General

Brand	H3C
Model	S3100 Series
Category	Switch
Language	English