Command Manual – ACL
H3C S7500E Series Ethernet Switches Chapter 1 ACL Configuration Commands
1-19
1.2.9 rule (in Ethernet frame header ACL view)
Syntax
rule [ rule-id ] { deny | permit } [ cos vlan-pri | dest-mac dest-addr dest-mask | lsap
lsap-code lsap-wildcard | source-mac sour-addr source-mask | time-range time-name
| type type-code type-wildcard ] *
undo rule rule-id
View
Ethernet frame header ACL view
Parameters
rule-id: Ethernet frame header ACL rule number in the range 0 to 65534.
deny: Defines a deny statement to drop matched packets.
permit: Defines a permit statement to allow matched packets to pass.
cos vlan-pri: Defines an 802.1p priority. The vlan-pri argument takes a value in the
range 0 to 7; or its equivalent in words, best-effort, background, spare,
excellent-effort, controlled-load, video, voice, or network-management.
dest-mac dest-addr dest-mask: Specifies a destination MAC address range. The
dest-addr and dest-mask arguments indicate a destination MAC address and mask in
xxxx-xxxx-xxxx format.
lsap lsap-code lsap-wildcard: Defines the DSAP and SSAP fields in the LLC
encapsulation. The lsap-code argument is a 16-bit hexadecimal number indicating
frame encapsulation. The lsap-wildcard argument is a 16-bit hexadecimal number
indicating the wildcard of the LSAP code.
source-mac sour-addr source-mask: Specifies a source MAC address range. The
sour-addr and sour-mask arguments indicate a source MAC address and mask in
xxxx-xxxx-xxxx format.
time-range time-name: Specifies the time range in which the rule can take effect. The
time-name argument comprises 1 to 32 characters. It is case insensitive and must start
with an English letter. To avoid confusion, this name cannot be all.
type type-code type-wildcard: Defines a link layer protocol. The type-code argument is
a 16-bit hexadecimal number indicating frame type. It is corresponding to the type-code
field in Ethernet_II and Ethernet_SNAP frames. The type-wildcard argument is a 16-bit
hexadecimal number indicating the wildcard.
Description
Use the rule command to create an Ethernet frame header ACL rule or modify the rule
if it has existed.
Use the undo rule command to remove an Ethernet frame header ACL rule.
To Next Page
Loading...
Need help?
General
