Layer 2 Acls - Alcatel OmniSwitch 6624 Network Configuration Manual

Configuring ACLs
rule7 will take precedence over the other rules. (For more information about precedence, see
dence" on page 22-5.) The action configured for the rule, a1, allows traffic from 10.10.4.8, so the flow will
be accepted on the switch.
The rule will not be used to classify traffic or enforce the policy until the qos apply command is entered.
For information about applying policy parameters, see
Chapter 21, "Configuring QoS."

Layer 2 ACLs

Layer 2 filtering filters traffic at the MAC layer. The QoS software works in conjunction with the source
learning mechanism in the switch to filter Layer 2 traffic. Layer 2 filtering may be done for both bridged
and routed packets. As MAC addresses are learned on the switch, QoS classifies the traffic based on:
MAC address or MAC group
•
VLAN
•
Physical slot/port or port group
•
Interface type
•
The switch classifies the MAC address as both source and destination. The condition parameters in the
policy rule must be all source parameters or all destination parameters.
The following policy condition keywords are used for Layer 2 ACLs:
Layer 2 ACL Condition Keywords
source mac
source mac group
source vlan
source port
source port group
source interface type
A group and an individual item cannot be specified in the same condition. For example, a source MAC
address and a source MAC group cannot be specified in the same condition.
Note that some combinations of Layer 2 conditions may not be valid. Refer to
on page 21-6 and "Condition/Action Combinations" on page 21-7
If the default bridged disposition is set to drop or deny, any rules for allowing Layer 2 traffic through the
switch must be configured in two instances, once for source and once for destination.
page 22-12
"Applying the Configuration" on page 21-46
destination mac
destination mac group
destination vlan
destination port
destination port group
destination interface type
OmniSwitch 6624/6648 Network Configuration Guide
Configuring ACLs
"Condition Combinations"
in Chapter 21, "Configuring QoS."
"Rule Prece-
in
April 2004