Chapter4ServiceConguration
CommandMode
Layer2ingressACLcongurationmode
Syntax
rule<1-500>{permit|deny}other{[ether-type<1501-65535>|dsap-ssap<0-65535>][co
s<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|any][<dest-mac><dmac-mask>|
any]}
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
other
ThisruleisonlyvalidforthepacketsexceptIP/ARP .IP/ARP
packetignoresthisrule.
ether-type<1501-65535>
Thisruleisonlyvalidforthepacketwithspeciedether-typevalue.
Ignorethisruleforothermessages.Therangeofether-typeis
1501to65535.Ofwhich2048,2054and34525respectively
correspondsto0x0800,0x0806and0x86DD.
dsap-ssap<0-65535>
Thisruleisonlyvalidforthepacketwithspecieddsap-ssap
value.Ignorethisruleforothermessages.Therangeof
dsap-ssapis0to65535.
cos<0-7>
Thisruleisonlyvalidforthecos-speciedmessage.Ignorethis
ruleforothermessages.Therangeofcosis0to7.
<vlan-id>
ThisruleisonlyvalidformessageswiththespeciedVLANID.
Ignorethisruleforothermessages.TheruleofVLANIDis1
to4094.
<vlan-mask>OptionalVLANmask.Thedefaultvalueis0xfff.
<source-mac>SourceMACaddressofthetransmittedpacket.
<smac-mask>SourceMACmask.
any(rst)
TheanykeywordisusedastheabbreviationofthesourceMAC
address00.00.00.00.00.00andthemask00.00.00.00.00.00.
<dest-mac>DestinationMACaddressofthetransmittedpacket.
<dmac-mask>DestinationMACmask.
any(second)
Theanykeywordisusedastheabbreviationofthedestination
MACaddress00.00.00.00.00.00andthemask00.00.00.00.00.00.
4-231
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential