Configuring An Ethernet Frame Header Acl - HP 4800G Series Configuration Manual

[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0
0.0.0.255 destination-port eq 80
# Verify the configuration.
[Sysname-acl-adv-3000] display acl 3000
Advanced ACL
ACL's step is 5
rule 0 permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0 0.0.0.255
destination-port eq www (5 times matched)

Configuring an Ethernet Frame Header ACL

Ethernet frame header ACLs match packets based on Layer 2 protocol header fields such as source
MAC address, destination MAC address, 802.1p priority (VLAN priority), and link layer protocol type.
They are numbered in the range 4000 to 4999.
Configuration Prerequisites
If you want to reference a time range in a rule, define it with the time-range command first.
Configuration Procedure
Follow these steps to configure an Ethernet frame header ACL:
To do...
Enter system view
Create an Ethernet
frame header ACL
and enter its view
Create or modify a
rule
Set the rule
numbering step
Configure a
description for the
Ethernet frame
header ACL
Configure a rule
description
3000, named -none-, 1 rule,
Use the command...
system-view
acl number acl-number [ name
acl-name ] [ match-order { auto |
config } ]
rule [ rule-id ] { deny | permit } [ cos
vlan-pri | dest-mac dest-addr
dest-mask | lsap lsap-code
lsap-wildcard | source-mac
sour-addr source-mask | time-range
time-range-name | type type-code
type-wildcard ] *
step step-value
description text
rule rule-id comment text
––
Required
The default match order is config.
If you specify a name for an IPv4 ACL
when creating the ACL, you can use
the acl name acl-name command to
enter the view of the ACL later.
Required
To create or modify multiple rules,
repeat this step.
Note that the lsap keyword is not
supported if the ACL is to be
referenced by a QoS policy for traffic
classification.
Optional
5 by default
Optional
By default, an Ethernet frame header
ACL has no ACL description.
Optional
By default, an Ethernet frame header
ACL rule has no rule description.
2-6
Remarks