H3C S3100 8C SI Operation Manual page 507

Operation Manual – ACL
H3C S3100 Series Ethernet Switches
The settings to be specified in the rule, such as source and destination MAC
addresses, VLAN priorities, and Layer 2 protocol types, are determined.
II. Configuration Procedure
Table 1-4 Define a Layer 2 ACL rule
Operation
Enter system view
Create a Layer 2
ACL and enter
layer 2 ACL view
Define an ACL rule
Assign a
description string
to the ACL rule
Assign a
description string
to the ACL
Note that:
You can modify any existent rule of the Layer2 ACL and the unmodified part of the
ACL remains.
If you do not specify the rule-id argument when creating an ACL rule, the rule will
be numbered automatically. If the ACL has no rules, the rule is numbered 0;
otherwise, the number of the rule will be the greatest rule number plus one. If the
current greatest rule number is 65534, however, the system will display an error
message and you need to specify a number for the rule.
The content of a modified or created rule cannot be identical with the content of
any existing rules; otherwise the rule modification or creation will fail, and the
system prompts that the rule already exists.
III. Configuration Example
# Configure ACL 4000 to deny packets sourced from the MAC address 000d-88f5-97ed,
destined for the MAC address 0011-4301-991e, and with their 802.1p priority being 3.
<Sysname> system-view
[Sysname] acl number 4000
[Sysname-acl-ethernetframe-4000] rule deny cos 3 source 000d-88f5-97ed
ffff-ffff-ffff dest 0011-4301-991e ffff-ffff-ffff
# Display the configuration information of ACL 4000.
Command
system-view
acl number acl-number
rule [ rule-id ] { permit |
deny } rule-string
rule rule-id comment text
description text
1-9
Chapter 1 ACL Configuration
Description
—
Required
Required
For information about
rule-string, refer to ACL
Commands.
Optional
No description by default
Optional
No description by default