source-ipv6-address postfix postfix-length | any } | source-port { eq | gt | lt |
range } port | time-range time-name ]
*
.
– To define an advanced ACL6 for ICMPv6 packets, run rule [ rule-id ] { deny |
permit } { protocol-number | icmpv6 } [ tos tos ] [ destination destination-ipv6-
address prefix-length | destination-ipv6-address/prefix-length | destination-ipv6-
address postfix postfix-length | any } | dscp dscp | fragment | icmpv6-type
{ icmp6-type-name | icmp6-type icmp6-code } | precedence precedence | source
{ source-ipv6-address prefix-length | source-ipv6-address/prefix-length | source-
ipv6-address postfix postfix-length | any } | time-range time-name ]
*
.
– To define an advanced ACL6 for other protocol packets, run rule [ rule-id ]
{ deny | permit } { protocol-number | gre | ipv6 | ipv6-ah | ipv6-esp | ospf }
[ tos tos ] [ destination { destination-ipv6-address prefix-length| destination-ipv6-
address/prefix-length | destination-ipv6-address postfix postfix-length | any } |
dscp dscp | fragment | precedence precedence | source { source-ipv6-address
prefix-length| source-ipv6-address/prefix-length | source-ipv6-address postfix
postfix-length | any } | time-range time-name ]
*
.
4. Run:
quit
Return to the system view.
5. Run:
traffic classifier classifier-name [ operator { and | or } ] [ precedence
precedence-value ]
A traffic classifier is created and the traffic classifier view is displayed.
The and parameter indicates that the relationship between rules in a traffic classifier
is AND. That is, packets match a traffic classifier only when the packets match all
non-ACL rules and an ACL rule in the traffic classifier. The or parameter indicates
that the relationship between rules in a traffic classifier is OR. That is, packets match
a traffic classifier when the packets match a rule in the traffic classifier.
By default, the relationship between rules in a traffic classifier is OR.
6. Run:
if-match [ ipv6 ] acl advanced-acl-number
A traffic classifier based on an advanced ACL is created.
l Creating a traffic classifier based on a Layer 2 ACL
1. Run:
system-view
The system view is displayed.
2. Run:
acl [ number ] mac-acl-number [ match-order { auto | config } ]
A Layer 2 ACL is created and the ACL view is displayed.
NOTE
mac-acl-number specifies the number of a Layer 2 ACL. The value is an integer that ranges
from 4000 to 4999.
3. (Optional) Run:
step step-value
Quidway S7700 Smart Routing Switch
Configuration Guide - QoS 1 Class-based QoS Configuration
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
18
To Next Page
Loading...
