H3C S3610-28P Operation Manual page 1058

Operation Manual – ACL
H3C S3610&S5510 Series Ethernet Switches
Note:
The user-defined ACLs are used in conjunction with the extended user-defined flow
template. When a port applies the extended flow template, you cannot apply policies
including the basic and advanced ACLs on the port.
The offset range of a user-defined extended flow template must cover the offset
range of the cooperating user-defined ACL; otherwise, the user-defined ACL cannot
be applied successfully.
Before applying a user-defined template on a port, make sure the user-defined
template is already configured. A port can be configured with only one flow
template.
Before you can apply a flow template on a port, make sure the following functions
are disabled on the port: 802.1x, cluster (NDP, NTDP, HABP, and Cluster), DHCP
Snooping, port isolation, MAC+IP+port binding, selective QinQ, and voice VLAN.
And also, you are not recommended to use these functions after you apply a flow
template on the port.
The S3610 and S5510 Series Ethernet Switches support up to two user-defined flow
templates each. Note that the total length of all the elements in a basic flow template
must be less than 16 bytes; otherwise, you will see an error message when applying
the flow template.
Table 4-1 Lengths of various elements
Element
customer-cos
customer-vlan-id
dip
dipv6
dmac
dport
ethernet-protocol
dscp
ip-precedence
tos
fragments
icmp-code
Table 4-1 lists the lengths of all elements.
Description
Customer 802.1p COS field
Customer VLAN ID field
Destination IP address field in IP head
Destination IPv6 address field in IPv6
head
Destination MAC address field in
ethernet packet head
Destination port field
The protocol type field in ethernet
packet head
DSCP field in IP head
Precedence field in IP head
ToS field in IP head
Fragments field in IP head
ICMP code field
4-3
Chapter 4 Flow Template Configuration
Length (in bytes)
1
6
0
10
6
2
4
1
0
2