By default, the relationship between rules in a traffic classifier is OR.
7. Run:
if-match [ ipv6 ] acl basic-acl-number
A traffic classifier based on a basic ACL is created.
l Creating a traffic classifier based on an advanced ACL
1. Run:
system-view
The system view is displayed.
2. Run:
acl [ ipv6 ] [ number ] advanced-acl-number [ match-order { auto |
config } ]
An advanced ACL is created and the ACL view is displayed.
NOTE
advanced-acl-number specifies the number of an advanced ACL. The value is an integer that
ranges from 3000 to 3999.
3. Run the following commands as required.
– To define an advanced ACL for Genetic Routing Encapsulation (GRE), Internet
Group Management Protocol (IGMP), IP, IPinIP, or Open Shortest Path First
(OSPF) packets, run:
rule [ rule-id ] { deny | permit } { protocol-number | gre | igmp | ip
| ipinip | ospf } [ tos tos ] [ destination { destination-address
destination-wildcard | any } | dscp dscp | fragment | precedence
precedence | source { source-address source-wildcard | any } | time-
range time-name ]
*
– To define an advanced ACL for Transmission Control Protocol (TCP) packets,
run:
rule [ rule-id ] { deny | permit } { protocol-number | tcp } [ tos
tos ] [ destination { destination-address destination-wildcard | any }
| destination-port { eq | gt | lt | range } port | dscp dscp |
fragment | precedence precedence | source { source-address source-
wildcard | any } | source-port { eq | gt | lt | range } port | tcp-
flag { tcp-value | ack | fin | psh | rst | syn | urg }
*
| time-range
time-name ]
*
– To define an advanced ACL for User Datagram Protocol (UDP) packets, run:
rule [ rule-id ] { deny | permit } { protocol-number | udp } [ tos
tos ] [ destination { destination-address destination-wildcard | any }
| destination-port { eq | gt | lt | range } port | dscp dscp |
fragment | precedence precedence | source { source-address source-
wildcard | any } | source-port { eq | gt | lt | range } port | time-
range time-name ]
*
– To define an advanced ACL for Internet Control Message Protocol (ICMP)
packets, run:
rule [ rule-id ] { deny | permit } { protocol-number | icmp } [ tos
tos ] [ destination { destination-address destination-wildcard | any }
| dscp dscp | fragment | icmp-type { icmp-name | icmp-type icmp-code }
| precedence precedence | source { source-address source-wildcard |
any } | time-range time-name ]
*
– To define an advanced ACL6 for TCP packets and UDP packets, run rule [ rule-
id ] { deny | permit } { protocol-number | tcp | udp } [ tos tos ] [ destination
{ destination-ipv6-address prefix-length | destination-ipv6-address/prefix-
length | destination-ipv6-address postfix postfix-length | any } | destination-
port { eq | gt | lt | range } port | dscp | fragment | precedence precedence |
source { source-ipv6-address prefix-length | source-ipv6-address/prefix-length |
Quidway S7700 Smart Routing Switch
Configuration Guide - QoS 1 Class-based QoS Configuration
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
17
To Next Page
Loading...
