Configuring Layer 2 Acl - H3C S5100-SI Operation Manual

The content of a modified or created rule cannot be identical with the content of any existing rules;
otherwise the rule modification or creation will fail, and the system prompts that the rule already
exists.
If the ACL is created with the auto keyword specified, the newly created rules will be inserted in the
existent ones by depth-first principle, but the numbers of the existent rules are unaltered.
Configuration Example
# Configure ACL 3000 to permit the TCP packets sourced from the network 129.9.0.0/16 and destined
for the network 202.38.160.0/24 and with the destination port number being 80.
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0
0.0.0.255 destination-port eq 80
# Display the configuration information of ACL 3000.
[Sysname-acl-adv-3000] display acl 3000
Advanced ACL
Acl's step is 1
rule 0 permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0 0.0.0.255
destination-port eq www

Configuring Layer 2 ACL

Layer 2 ACLs filter packets according to their Layer 2 information, such as the source and destination
MAC addresses, VLAN priority, and Layer 2 protocol types.
A Layer 2 ACL can be numbered from 4000 to 4999.
Configuration Prerequisites
To configure a time range-based Layer 2 ACL rule, you need to create the corresponding time
ranges first. For information about time range configuration, refer to section
Range
The settings to be specified in the rule, such as source and destination MAC addresses, VLAN
priorities, and Layer 2 protocol types, are determined.
Configuration Procedure
Table 1-4 Define a Layer 2 ACL rule
Operation
Enter system view
Create a Layer 2 ACL
and enter layer 2 ACL
view
Define an ACL rule
Assign a description
string to the ACL rule
3000, 1 rule
Command
system-view
acl number acl-number
rule [ rule-id ] { permit | deny }
rule-string
rule rule-id comment text
—
Required
Required
For information about rule-string,
refer to ACL Commands.
Optional
No description by default
1-7
Configuring Time
Description