H3C S7500E Series Command Manual

Command Manual – ACL
H3C S7500E Series Ethernet Switches Chapter 1 ACL Configuration Commands
1-15
Parameters Function Description
tos tos
Specifies a ToS
preference.
The tos argument can be a number in the
range 0 to 15, or in words,
max-reliability (2), max-throughput
(4), min-delay (8), min-monetary-cost
(1), or normal (0).
dscp dscp
Specifies a DSCP
priority.
The dscp argument can be a number in
the range 0 to 63, or in words, af11(10),
af12(12), af13(14), af21(18), af22(20),
af23(22), af31(26), af32(28), af33(30),
af41(34), af42(36), af43(38), cs1(8),
cs2(16), cs3(24), cs4(32), cs5(40),
cs6(48), cs7(56), default(0), or ef(46).
logging
Specifies to log
matched packets.
––
reflective
Specifies the rule
to be reflective.
A rule with the reflective keyword can be
defined only for TCP, UDP, or ICMP
packets and its statement can only be
permit.
fragment
Specifies that the
rule applies to
only IP fragments.
A rule defined with the fragment
keyword matches non-last IP fragments
on an SA Series LPUs (for example,
LSQ1FP48SA) or EA Series LPUs (for
example, LSQ1GP12EA) while matching
non-first IP fragments on an SC Series
LPUs (for example, LSQ1GP24SC).
time-range
time-name
Specifies the time
range in which the
rule can take
effect.
The time-name argument comprises 1 to
32 characters. It is case insensitive and
must start with an English letter. To avoid
confusion, this name cannot be all.
vpn-instance
vpn-instance-name
Specifies a VPN
instance.
The vpn-instance-name argument is a
case-sensitive string of 1 to 31
characters.
Without this combination, the rule applies
to only non-VPN packets.
If the protocol argument is set to tcp or udp, you may define the parameters in the
following table.

H3C S7500E Series Specifications

General

Brand	H3C
Model	S7500E Series
Category	Switch
Language	English