Operation Manual – ACL
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
ACL Configuration
1-14
Parameter Type Function Description
source
{ source-addr
source-mask |
vlan-id }*
Source MAC
address
information
Specifies the
source MAC
address
range for the
ACL rule
source-addr: Source MAC
address, in the format of
H-H-H.
source-mask: Mask of the
source MAC address, in the
format of H-H-H.
vlan-id: Source VLAN ID, in
the range of 1 to 4094.
dest dest-addr
dest-mask
Destination
MAC address
information
Specifies the
destination
MAC address
range for the
ACL rule
dest-addr: Destination MAC
address, in the format of
H-H-H.
dest-mask: Mask of the
destination MAC address, in
the format of H-H-H.
cos cos Priority
Specifies the
802.1p
priority for the
rule
cos: VLAN priority, in the
range of 0 to 7.
time-range
time-name
Time range
information
Specifies the
time range in
which the
ACL rule is
active
time-name: Specifies the
name of the time range in
which the rule is active, a
string comprising 1 to 32
characters.
type
protocol-type
protocol-mask
Protocol type
of Ethernet
frames
Specifies the
protocol type
of Ethernet
frames for the
ACL rule
protocol-type: Protocol type.
protocol-mask: Protocol type
mask.
Note:
z An H3C S3600 Ethernet switch does not support the format-type argument for a
layer 2 ACL.
z A rule with the lsap keyword specified can be applied to a port but does not take
effect.
If you specify the cos keyword, you can directly input a value ranging from 0 to 7 or
input one of the keywords listed in
Table 1-6 as the CoS value.
Table 1-14 CoS value and the corresponding keywords
Keyword CoS in decimal CoS in binary
best-effort
0 000
background
1 001