Huawei Quidway S5600 Series Operation Manual page 702

Operation Manual – ACL
Quidway S5600 Series Ethernet Switches-Release 1510
Parameter
lsap
lsap-wildcard
source
{ source-addr
source-mask
vlan-id }*
dest
dest-mask
cos vlan-pri
time-range
time-name
type
protocol-type
protocol-mask
1.5.3 Configuration Example
# Configure ACL 4000 to deny packets whose 802.1p priority is 3.
<Quidway> system-view
[Quidway] acl number 4000
[Quidway-acl-ethernetframe-4000] rule deny cos 3
[Quidway-acl-ethernetframe-4000] display acl 4000
Ethernet frame ACL
Acl's step is 1
rule 0 deny cos excellent-effort
Type
lsap-code
lsap field
Source MAC
address
|
information
Destination
dest-addr
MAC address
information
Priority
Time range
information
Protocol type
of Ethernet
frames
4000, 1 rule
Huawei Technologies Proprietary
Function
lsap-code: the encapsulation
format of data frames, a 16-bit
hexadecimal number
Defines the
lsap field in
lsap-wildcard: mask of the
the rule
lsap
hexadecimal number used to
specify the mask bit
source-addr:
address, in the format of
Specifies the
H-H-H
source MAC
source-mask: source MAC
address
address mask, in the format
range in the
of H-H-H
rule
vlan-id: source VLAN ID, in
the range of 1 to 4,094
dest-addr: destination MAC
Specifies the
address, in the format of
destination
H-H-H
MAC address
dest-mask: destination MAC
range in the
address mask, in the format
rule
of H-H-H
Defines the
802.1p vlan-pri: VLAN priority, in the
priority of the range of 0 to 7
rule
Specifies the time-name:
time range in name of the time range in
which the rule which the rule is active; a
is active string of 1 to 32 characters
Defines the
protocol-type: protocol type
protocol type
protocol-mask: protocol type
of Ethernet
mask
frames
1-14
Chapter 1 ACL Configuration
Description
value, a 16-bit
source MAC
specifies the