Command Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches Chapter 1 ACL Commands
Huawei Technologies Proprietary
1-10
Note:
For S3526, S3526 FM, S3526 FS switches, parameter icmp-type is only supported
when user defines advance ACL. ICMP packet type and code (the parameter type code
in rule command) can’t be configured. Otherwise the system will prompt the
configuration is not available.
established: Used when protocol is tcp to indicate that the rule takes effect on the first
SYN packet to establish TCP connection.
precedence precedence: Specifies IP precedence with a number in the range of 0 to 7
or a name.
tos tos: Classifies the data packets with a number in the range of 0 to 15 or a name.
dscp dscp: Classifies the data packets with a number in the range of 0 to 63 or a name.
fragment: Indicates that the rule takes effect on fragmented packets only and will be
ignored for other packets.
z The parameter of link ACL
ingress { { source-vlan-id | source-mac-addr | interface { interface-name |
interface-type interface-num } }* | any }: Source information of a data packet.
source-vlan-id specifies the source VLAN of the packet, and source-mac-addr specifies
the source MAC address of the data packets. interface { interface-name |
interface-type interface-num } represents the L2 port receiving the packets. any
represents all the packets received from all the ports.
egress { { destination-vlan-id | dest-mac-addr | interface { interface-name |
interface-type interface-num } }* | any }: Specifies the destination information of data
packets. destination-vlan-id specifies the destination VLAN of the packet.
dest-mac-addr specifies the destination MAC address of the data packets. interface
{ interface-name | interface-type interface-num } the L2 port forwarding the packets.
any represents all the packets forwarded by all the ports.
Description
Using rule command, you can add a rule to an ACL. Using undo rule command, you
can cancel a rule from an ACL.
You can add a lot of rules to an ACL. If you input the parameter when use the undo rule
command, the system will delete the corresponding content of the rule according to the
parameter input.
S3526 has some restrictions on ACL configuration in implementing QOS function using
traffic classification. The restriction details are listed in the following table.