H3C S7500 Series Operation Manual page 674

Operation Manual – ACL
H3C S7500 Series Ethernet Switches
Table 1-14 Rule information
Parameter
protocol-type
format-type
ingress
{ { source-vla
n-id |
source-mac-
addr
[ source-mac
-mask ] }* |
any }
egress
{ dest-mac-a
ddr
[ dest-mac-m
ask ] | any }
cos cos
time-range
time-name
Type
Defines the
Protocol type protocol type over
Ethernet frames
Defines the link
Link layer
layer
encapsulation
encapsulation type
type
in the rule
Specifies the
Source MAC
source MAC
address
address range in
information
the ACL rule
Specifies the
Destination
destination MAC
MAC address
address range in
information
the ACL rule
Defines the 802.1p
Priority priority of the ACL
rule
Specifies the time
Time range
range in which the
information
rule is active
1-16
Chapter 1 ACL Configuration
Function
protocol-type: the value
can be ip, arp, rarp, ipx,
nbx, pppoe-control, or
pppoe-data. When the
protocol type is arp, the
rules cannot match the
ARP packets with the
destination MAC address
as the MAC address of
Layer 3 interface or with
the destination MAC
address being all Fs.
format-type: the value can
be 802.3/802.2, 802.3,
ether_ii, or snap.
source-mac-addr: source
MAC address, in the
format of H-H-H
source-mac-mask: source
MAC address mask, in the
format of H-H-H, defaults
to ffff-ffff-ffff.
source-vlan-id: source
VLAN ID, in the range of 1
to 4,094
any represents all packets
received from all ports.
dest-mac-addr:
destination MAC address,
in the format of H-H-H
dest-mac-mask:
destination MAC address
mask, in the format of
H-H-H, defaults to
ffff-ffff-ffff.
any represents all packets
forwarded by all ports.
cos: ranges from 0 to 7
time-name: name of a
time range in which the
ACL rule is active; a string
of 1 to 32 characters
Remarks