H3C SR6600 Configuration Manual page 14

Monitoring rules: that is, to monitor, analyze, and process the packets to be sent to the ACFP client.
The action types corresponding to monitoring rules are redirect and mirror.
Filtering rules: that is, to determine which packets to deny and which packets to permit. The action
types corresponding to filtering rules are deny and permit.
Restricting rules: that is, to determine the rate of which packets is to be restricted. The action type
corresponding to restricting rules is rate.
Rule information is described as follows:
ClientID: ACFP client identifier.
Policy index
Rule index: rule identifier
Status: It indicates whether the rule is applied successfully.
Action: It can be mirror, redirect, deny, permit, or rate.
Match all packets: It indicates whether to match all the packets. If yes, the following matching
needs not be performed.
Source MAC address
Destination MAC address
Starting VLAN ID
Ending VLAN ID
Protocol number in IP
Source IP address
Wildcard mask of source IP address
Source port operator: Its type can be equal to, not equal to, greater than, less than, greater
than and less than. The following ending source port number takes effect only when the type is
greater than and less than. The source port number of the packets matched by the identifier
must be greater than the starting source port number and less than the ending source port number.
Starting source port number
Ending source port number
Destination IP address
Wildcard mask of destination IP address
Destination port number operator: Its type can be equal to, not equal to, greater than, less than,
greater than and less than. The following ending destination port number is meaning only when
the type is greater than and less than. The destination port number of the packets matched by
the identifier must be greater than the starting destination port number and less than the ending
destination port number.
Starting destination port number
Ending destination port number
Pro: Protocol type, which can be GRE, ICMP, IGMP, OSPF, TCP, UDP, and IP.
IP precedence: Packet precedence, a number in the range of 0 to 7.
IP ToS: Type of Service (ToS) of IP
IP DSCP: Differentiated Services Code Point (DSCP) of IP
TCP flag: It indicates that some bits in the six flag bits (URG, ACK, PSH, RST, SYN, FIN) are
concerned.
2-8