H3C S6550X-HI Series Command Reference Manual page 2149

Keyword
cs6
cs7
default
ef
: Specifies an ECN value in the range of 0 to 3. The last two bits in the differentiated
ecn ecn
services (DS) field of the IP header are defined for use by ECN. For more information about the DS
field and ECN, see QoS configuration in ACL and QoS Configuration Guide.
source { source-address source-wildcard | any }
•
The
source-address source-wildcard
wildcard mask in dotted decimal notation. An all-zero wildcard represents a host address.
•
The
any
destination { dest-address dest-wildcard | any }
•
The
dest-address dest-wildcard
wildcard mask in dotted decimal notation. An all-zero wildcard represents a host address.
•
The
any
source-port { operator port1 [ port2 ] }
ports.
•
The
operator
equal to), or
•
The
port1
The
port2
destination-port { operator port1 [ port2 ] }
or UDP ports.
•
The
operator
equal to), or
•
The
port1
The
port2
udf-format
•
—Matches INT packets.
ifa
•
raw_ip
packets.
vpn-instance vpn-instance-name
vpn-instance-name
to filter packets, if you do not specify a VPN instance, the rule applies only to non-VPN packets. For
an ACL used by other features, if you do not specify a VPN instance, the implementation varies by
feature. For more information, see the configuration guide of the feature.
Usage guidelines
Within an ACL, the permit or deny statement of each rule must be unique. If the rule you are creating
or editing has the same deny or permit statement as another rule in the ACL, the rule will not be
created or changed.
If the rule ID has been used when you create a rule:
•
For command set 1, the new rule overwrites the existing rule.
DSCP value (binary)
110000
111000
000000
101110
keyword specifies any source IP address.
keyword specifies any destination IP address.
argument can be
(inclusive range).
range
and arguments are TCP or UDP port numbers in the range of 0 to 65535.
port2
argument is needed only when the
argument can be
(inclusive range).
range
and arguments are TCP or UDP port numbers in the range of 0 to 65535.
port2
argument is needed only when the
: Specifies the packet format. The following packet formats are supported:
—Matches all packets except for GRE, ICMP, IGMP, IPinIP, OSPF, TCP, and UDP
argument is a case-sensitive string of 1 to 31 characters. For an ACL used
arguments specify a source IP address and a
arguments specify a destination IP address and a
: Specifies one or more source TCP or UDP
(lower than), (greater than),
lt gt
operator
: Specifies one or more destination TCP
(lower than), (greater than),
lt gt
operator
: Applies the rule to an MPLS L3VPN instance. The
25
DSCP value (decimal)
48
56
0
46
: Specifies a source IP address.
: Specifies a destination IP address.
(equal to),
eq
argument is .
range
(equal to),
eq
argument is .
range
(not
neq
(not
neq