Configuring Acl Rules; Configuring Mpls Redirection - H3C S9500 Series Operation Manual

Operation Manual – NAT-URPF-VPLS
H3C S9500 Series Routing Switches
When you define the flow template, the total size of all the elements in the template
must be less than 16 bytes.

3.5.10 Configuring ACL rules

Use the following commands to define a Layer 2 ACL.
Perform the following configuration in corresponding views.
Table 3-14 Configure ACL rules
Enter a Layer 2 ACL view from
system view
Define a sub-rule in Layer 2 ACL
view
Remove a sub-rule in Layer 2
ACL view
Remove Layer 2 ACL or all ACLs
in system view
Note:
Delete related redirection configurations before deleting ACL configuration.

3.5.11 Configuring MPLS redirection

Only VPLS service processor cards can process VPLS services, so it is necessary to
redirect the VPLS packets back from the public network side to VPLS service processor
card for processing by configuring ACL rules.
Perform the following configuration in Ethernet port view.
Table 3-15 Configure packet redirection on Ethernet port of common interface card
Configure packet redirection to a
specific port of VPLS service
processor cards
Operation
Operation
Command
acl { number acl-number | name acl-name
advanced } [ match-order { config | auto } ]
rule [ rule-id ] { permit | deny } [ cos cos-value
| c-tag-cos c-cos-value | exp exp-value |
protocol-type | ingress { { source-vlan-id [ to
source-vlan-id-end
source-mac-wildcard
c-tag-vlanid }* | any } | egress { dest-mac-addr
dest-mac-wildcard
s-tag-vlanid | time-range name]*
undo rule rule-id
undo acl { number acl-number | name
acl-name | all }
traffic-redirect
acl-number [ rule rule [ system-index
index ] ] slot slotid vlanid [ join-vlan] }
3-13
Chapter 3 VPLS Configuration
] | source-mac-addr
| c-tag-vlan
| any } | s-tag-vlan
Command
inbound link-group