Defining Layer 2 Acls - Huawei Quidway S3900 Series Operation Manual

Operation Manual – ACL
Quidway S3900 Series Ethernet Switches-Release 1510
1.4.3 Configuration Example
# Configure ACL 3000 to permit ICMP packets to pass.
<Quidway> system-view
[Quidway] acl number 3000
[Quidway-acl-adv-3000] rule 0 permit icmp
[Quidway-acl-adv-3000] display acl 3000
Advanced ACL
Acl's step is 1
rule 0 permit icmp

1.5 Defining Layer 2 ACLs

Layer 2 ACLs define rules based on the Layer 2 information such as the source and
destination MAC address information, VLAN priority and Layer 2 protocol to process
packets.
The value range for Layer 2 ACL numbers is 4,000 to 4,999.
1.5.1 Configuration Preparation
Before configuring an ACL rule containing time range arguments, you need to configure
define the corresponding time ranges. For the configuration of time ranges, refer to
section 1.2 "Configuring Time Ranges".
The values of the source and destination MAC addresses, VLAN priority and Layer 2
protocol in the rule have been defined.
1.5.2 Configuration Tasks
Table 1-9 Create a Layer 2 ACL rule
Operation
Enter system view
Create
layer 2 ACL view
Define an rule
Define
comment string of
the ACL rule
Define
description
information of the
ACL
3000, 1 rule
Command
system-view
or enter
acl number acl-number
rule [ rule-id ] { permit |
deny } rule-string
the
rule rule-id comment text
the
description text
Huawei Technologies Proprietary
—
Required
Required
Optional
Optional
1-11
Chapter 1 ACL Configuration
Description