Huawei Quidway S3900 series Command Manual page 735

Command Manual – ACL
Quidway S3900 Series Ethernet Switches-Release 1510
rule-id: ACL rule ID, in the range of 0 to 65,534.
deny: Drops packets that satisfy the condition.
permit: Permits packets that satisfy the condition to pass.
rule-string: Rule information, which can be combination of the parameters described in
Table 1-9.
Table 1-9 Rule information
Parameter
format-type
lsap lsap-code
lsap-wildcard
source
{ source-addr
source-mask |
vlan-id }*
dest dest-addr
dest-mask
cos vlan-pri
time-range
time-name
type
protocol-type
protocol-mask
Type Function
Defines the link
Link layer
layer
encapsulation
encapsulation
type
type in the rule
Defines the lsap
lsap field
field in the rule
Specifies
Source MAC
source
address
address
information
in the rule
Specifies
Destination
destination MAC
MAC address
address
information
in the rule
Defines
Priority 802.1p
of the rule
Specifies
Time range time range in
information
which the rule is
active
Protocol type Defines
of Ethernet protocol type of
frames Ethernet frames
Huawei Technologies Proprietary
1-15
Chapter 1 ACL Commands
Description
format-type: the value can be
802.3/802.2, 802.3, ether_ii,
or snap.
lsap-code: the encapsulation
format of data frames, a
16-bit hexadecimal number
lsap-wildcard: mask of the
lsap value,
hexadecimal number used to
specify the mask bit
source-addr:
address, in the format of
H-H-H
the
MAC source- mask: source MAC
range address mask, in the format
of H-H-H
vlan-id: source VLAN ID, in
the range of 1 to 4,094
dest-addr: destination MAC
address, in the format of
the
H-H-H
range
dest- mask: destination MAC
address mask, in the format
of H-H-H
the
vlan-pri: VLAN priority, in the
priority
range of 0 to 7
the time-name:
name of the time range in
which the rule is active; a
string of 1 to 32 characters
protocol-type: protocol type
the
protocol-mask: protocol type
mask
a 16-bit
source MAC
specifies the