Huawei Quidway S6500 Series Operation Manual page 344

Operation Manual - QoS/ACL
Quidway S6500 Series Ethernet Switches
II. Define advanced ACL
The rules of the classification for advanced ACL are defined on the basis of the
attributes such as source and destination IP address, the TCP or UDP port number in
use and packet priority to process the data packets. The advanced ACL supports the
analyses of three kinds of packet priorities, ToS (Type of Service), IP and DSCP
priorities.
You can use the following command to define advanced ACL.
Perform the following configuration in corresponding view.
Table 1-6 Define advanced ACL
Operation
Enter
view(from system view)
Add a sub-item to the
ACL(from
ACL view)
Delete a sub-item from
the ACL(from advanced
ACL view)
Delete one ACL or all the
ACL(from system view)
The advanced ACL is identified with the numbers ranging from 3000 to 3999.
Note that, the port1 and port2 in the above command specify the TCP or UDP ports
used by various high-layer applications. For some common port numbers, you can use
the mnemonic symbols as shortcut. For example, "bgp" can represent the TCP number
179 used by BGP.
Note:
Type A cards do not support to deliver rules that configured with icmp-type type code,
tos tos, fragment parameters to hardware.
advanced ACL acl { number acl-number | name acl-name advanced }
[ match-order { config | auto } ]
rule [ rule-id ] { permit | deny } protocol [ source
{ source-addr wildcard | any } ] [ destination { dest-addr
dest-mask | any } ]
advanced [ port2 ] ] [ destination-port operator port1 [ port2 ] ]
[ icmp-type type code ] [ established ] [ [ precedence
precedence | tos tos ]* | dscp dscp ] [ fragment ]
[ time-range name ]
undo rule
[ source-port ] [ destination-port ] [ icmp-type ]
[ precedence ] [ tos ] [ dscp ] [ fragment ]
[ time-range ]
undo acl { number acl-number | name acl-name | all }
Huawei Technologies Proprietary
Command
[ source-port operator port1
rule-id [ source ] [ destination ]
1-7
Chapter 1 ACL Configuration