Configuring User-Defined Acl - 3Com 5500-EI PWR Install Manual

To do...
Create a Layer 2 ACL and
enter layer 2 ACL view
Define an ACL rule
Assign a description string
to the ACL rule
Assign a description string
to the ACL
Note that:
You can modify any existent rule of the Layer2 ACL and the unmodified part of the ACL
remains.
If you do not specify the rule-id argument when creating an ACL rule, the rule will be
numbered automatically. If the ACL has no rules, the rule is numbered 0; otherwise, the
number of the rule will be the greatest rule number plus one. If the current greatest rule
number is 65534, however, the system will display an error message and you need to
specify a number for the rule.
The content of a modified or created rule cannot be identical with the content of any
existing rules; otherwise the rule modification or creation will fail, and the system
prompts that the rule already exists.
Configuration example
# Configure ACL 4000 to deny packets sourced from the MAC address 000d-88f5-97ed,
destined for the MAC address 0011-4301-991e, and with their 802.1p priority being 3.
<Sysname> system-view
[Sysname] acl number 4000
[Sysname-acl-ethernetframe-4000]
ffff-ffff-ffff dest 0011-4301-991e ffff-ffff-ffff
# Display the configuration information of ACL 4000.
[Sysname-acl-ethernetframe-4000] display acl 4000
Ethernet frame ACL
Acl's step is 1
rule 0 deny cos excellent-effort source 000d-88f5-97ed ffff-ffff-ffff dest
0011-4301-991e ffff-ffff-ffff

Configuring User-defined ACL

A user-defined ACL filters packets by comparing specific bytes in packet headers with
specified string.
Use the command...
acl number acl-number
rule [ rule-id ] { permit |
deny } rule-string
rule rule-id comment text
description text
rule
4000, 1 rule
1-9
Required
Required
For information about
rule-string, refer to ACL
Commands.
Optional
No description by default
Optional
No description by default
deny cos 3 source
Remarks
000d-88f5-97ed