Acl Profile - Huawei S1700 Series Web User Manual

S1700 Managed Series Ethernet Switches
Web User Manual

6.2 ACL Profile

Creating an ACL rule is divided into two basic steps. First, must create an ACL and then
specify the type, name, number and step of ACL. Second, must create frame-matching criteria
for switch in ACL.
Click ACL>ACL Profile to configure ACL rule for switch; the configuration page is shown as
the figure below.
Figure 6-3 Configure ACL Profile
Table 6-3 Parameters of Configuring ACL Profile
Item
Query
ACL ID
ACL Name
ACL Type
Step
ACL Description
Issue 05 (2012-10-25)
Description
Search ACL entry by "ACL Type', „ACL Number‟ or „ACL Name‟.
Number for ACL entry.
Name for ACL entry.
Display the match types for ACL entry :Standard IP, Extended IP,
Extended Ipv6, Extended MAC or User-defined.
Standard IP: indicate switch to detect source IP address for each
packet‟s header. Only can detect IPv4 (Ether Type is 0x0800).
Extended IP:
source/destination IP address, source/destination interface member,
IP/TOS priority or TCP mark for each packet header. Only can
detect IPv4 packet (Ether Type is 0x0800).
Extended IPv6:
source/destination IPv6 address, source/destination Interface
IP/TOS priority or TCP tag for each IPv6 packet header. Only can
detect IPv6 packet (Ether Type is 0x86DD).
Extended MAC: Indicates the switch to detect each frame header‟s
source/destination MAC address, Ethernet type or 802.1p priority.
Only can detect IP packets (Ether Type, non-0x0800 IPv4 and none
0x86DD IPv6).
User-defined: user can specify the address and content of test kits,
please refer to user-defined rule creation.
The starting number and distribution interval when the step
automatically assigns rule number.
Display functional description of ACL entry.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
indicate switch to
indicate switch
6 ACL Configuration
detect protocol type,
detects protocol type,
84