Chapter 1 Acl Configuration; Brief Introduction To Acl; Acl Overview - Huawei Quidway S6500 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S6500 Series Ethernet Switches

Chapter 1 ACL Configuration

1.1 Brief Introduction to ACL

Note:
A type card includes LS81FT48A, LS81FM24A, LS81FS24A, LS81GB8UA and
LS81GT8UA cards.

1.1.1 ACL Overview

A series of matching rules are required for the network devices to identify the packets to
be filtered. After identifying the packets, the switch can permit or deny them to pass
through according to the defined policy. Access Control List (ACL) is used to implement
such functions.
ACL classifies the data packets with a series of matching rules, including source
address, destination address and port number, etc. The switch verifies the data packets
with the rules in ACL and determines to forward or discard them.
The data packet matching rules defined by ACL can also be called in some other cases
requiring traffic classification, such as defining traffic classification for QoS.
An access control rule includes several statements. Different statements specify
different ranges of packets. When matching a data packet with the access control rule,
the issue of match-order arises.
I. The case of filter or classify the data transmitted by the hardware
ACL can be used to filter or classify the data transmitted by the hardware of switch. In
this case, the match order of ACL's sub-rules is determined by the switch hardware.
The match order defined by the user can't be effective.
The hardware match order of ACL's sub-rule is different in different switch models. The
details are listed in the following table.
Huawei Technologies Proprietary
1-1
Chapter 1 ACL Configuration