Huawei Quidway S3500 Series Operation Manual page 348

Operation Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches
analyses of three kinds of packet priorities, ToS (Type of Service), IP and DSCP
priorities.
You can use the following command to define advanced ACL.
Perform the following configuration in corresponding view.
Table 1-24 Defining the advanced ACL
Operation
Enter
view(from system view)
Add a sub-item to the
ACL(from
ACL view)
Delete a sub-item from
the ACL(from advanced
ACL view)
Delete one ACL or all the
ACL(from system view)
The advanced ACL is identified with the numbers ranging from 3000 to 3999.
Note that, the port1 and port2 in the above command specify the TCP or UDP ports
used by various high-layer applications. For some common port numbers, you can use
the mnemonic symbols as shortcut. For example, "bgp" can represent the TCP number
179 used by BGP.
III. Defining the Layer-2 ACL
The rules of Layer-2 ACL are defined on the basis of the Layer-2 information such as
source MAC address, source VLAN ID, Layer-2 protocol type, Layer-2 packet format
and destination MAC address.
You can use the following command to define the numbered Layer-2 ACL.
Perform the following configuration in corresponding view.
advanced ACL acl { number acl-number | name acl-name advanced }
[ match-order { config | auto } ]
rule [ rule-id ] { permit | deny } protocol [ source
source-addr wildcard | any ] [ destination dest-addr
dest-mask | any ] [ source-port operator port1 [ port2 ] ]
advanced
[ destination-port operator port1 [ port2 ] ] [ icmp-type
type code ] [ established ] [ [ precedence precedence |
tos tos ]* | dscp dscp ] [ fragment ] [ time-range name ]
undo rule rule-id [ source ] [ destination ]
[ source-port ] [ destination-port ] [ icmp-type ]
[ precedence ] [ tos ] [ dscp ] [ fragment ]
[ time-range ]
undo acl { number acl-number | name acl-name | all }
Huawei Technologies Proprietary
Command
1-22
Chapter 1 ACL Configuration