H3C WX Series Configuration Guide

19
Follow these steps to configure an Ethernet frame header ACL:
To do…
Use the command…
Remarks
Enter system view
system-view
––
Create an Ethernet frame
header ACL and enter its
view
acl number acl-number
[ name acl-name ]
[ match-order { auto |
config } ]
Required
By default, no ACL exists.
Ethernet frame header ACLs
are numbered in the range
4000 to 4999.
You can use the acl name
acl-name command to
enter the view of an existing
named Ethernet frame
header ACL.
Configure a description for
the Ethernet frame header
ACL
description text
Optional
By default, an Ethernet
frame header ACL has no
ACL description.
Set the rule numbering step
step step-value
Optional
5 by default
Create or edit a rule
rule [ rule-id ] { deny |
permit } [ cos vlan-pri |
dest-mac dest-addr
dest-mask | { lsap lsap-type
lsap-type-mask | type
protocol-type
protocol-type-mask } |
source-mac sour-addr
source-mask | time-range
time-range-name ] *
Required
By default
,
an Ethernet
frame header ACL does not
contain any rule.
To create or edit multiple
rules, repeat this step.
Configure or edit a rule
description
rule rule-id comment text
Optional
By default, an Ethernet
frame header ACL rule has
no rule description.
Copying an ACL
You can create an ACL by copying an existing ACL. The new ACL has the same
properties and content as the source ACL except the ACL number and name.
To copy an IPv4 or IPv6 ACL successfully, ensure that:
The destination ACL number is from the same category as the source ACL number.

H3C WX Series Specifications

General

Brand	H3C
Model	WX Series
Category	IP Access Controllers
Language	English