Command Manual - QoS/ACL
Quidway S6500 Series Ethernet Switches Chapter 1 ACL Command
Huawei Technologies Proprietary
1-9
Name of the ACL, which must be a character string starting with an English letter (a-z or
A-Z), and without any space or quotation mark in it.
link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence
number of ACL, ranging from 4000~4999. acl-name: Name of ACL, which must be a
character string started with an English letter (a-z or A-Z), and without any space or
quotation mark in it.
user-group { acl-number | acl-name }: activate the user-defined ACL. acl-number:
Specifies the ACL number, ranging from 5000 to 5999. acl-name: Specifies the ACL
name with a character string started with English letters (that is [a to z, A to Z]),
excluding space and quotation marks.
rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified,
all subitems of ACL will be activated.
not-care-for-interface: As for non-48-port interface card, the packet-filtering function
will take place on the interface card where the current port resides after the parameter
is chosen. As for the 48-port interface, if the number of the current port belong to the
range of 1 to 24, the packet filtering will take effect on port 1 to port 24 after the
parameter is chosen; if the number of the current port belong to the range of 25 to 48,
the packet filtering will take effect on port 25 to port 48 after the parameter is chosen.
Description
Using the packet-filter command, you can activate ACL. Using the undo packet-filter
command, you can cancel it.
 Note:
ARP packets are allowed to pass by default on S6500 Series Ethernet Switches. You
cannot use the packet-filter command to filter ARP packets, even though you have
used the rule command to define a Layer 2 ACL, in which the parameter protocol is
defined as ARP.
Example
# Activate ACL 2000.
[Quidway-qoss-Ethernet3/0/1] packet-filter inbound ip-group 2000
To Next Page
Loading...
Need help?
General
