Choosing ACL Mode for Traffic Flows
639
Layer 2 ACL depth-first order
With the depth-first rule adopted, the rules of a Layer 2 ACL are matched in the
order of the mask length of the source MAC address and destination MAC
address. The longer of the mask is, the higher the match priority is. If two mask
lengths are the same, the priority of the match rule configured earlier is higher. For
example, the priority of the match rule with source MAC address mask
FFFF-FFFF-0000 is higher then the priority of the match rule with source MAC
address mask FFFF-0000-0000.
ACLs Based on Time
Ranges
A time range-based ACL enables you to implement ACL control over packets by
differentiating the time ranges.
A time range can be specified in each rule in an ACL. If the time range specified in
a rule is not configured, the system will give a prompt message and allow such a
rule to be successfully created. However, the rule does not take effect immediately.
It takes effect only when the specified time range is configured and the system
time is within the time range. If you remove the time range of an ACL rule, the
ACL rule becomes invalid the next time the ACL rule timer refreshes.
Types of ACLs Supported
by the Ethernet Switch
The following types of ACLs are supported by the Ethernet switch:
■
Basic ACL
■
Advanced ACL
■
Layer 2 ACL
■
User-defined ACL
Choosing ACL Mode
for Traffic Flows
A switch can only choose one ACL mode for traffic flows, Layer 2 ACL mode or
Layer 3 ACL mode. In Layer 2 ACL mode, only Layer 2 ACL can be activated or
referenced by other applications, and Layer 3 ACL is similar.
Configuration Procedure
n
This configuration is only effective on Type A I/O Modules.
Configuration Example
# Configure the ACL mode for traffic flows as
link-based
.
Table 507
Configure ACL mode for traffic flows
Operation Command Description
Enter system view
system-view
-
Configure ACL mode for
traffic flows
acl mode
{
ip-based
|
link-based
}
Required
By default, a switch chooses
ip-based
ACL mode for
traffic flows, that is, ACL
classifies the traffic flows
based on Layer 3 information.
Display the ACL mode for
traffic flows
display acl mode
Optional
The
display
command can be
executed in any view
Summary of Contents for Switch 7754
Page 32: ...32 CHAPTER 1 CLI OVERVIEW ...
Page 70: ...70 CHAPTER 5 LOGGING IN USING MODEM ...
Page 76: ...76 CHAPTER 7 LOGGING IN THROUGH NMS ...
Page 86: ...86 CHAPTER 9 CONFIGURATION FILE MANAGEMENT ...
Page 120: ...120 CHAPTER 13 ISOLATE USER VLAN CONFIGURATION ...
Page 126: ...126 CHAPTER 14 SUPER VLAN ...
Page 136: ...136 CHAPTER 16 IP PERFORMANCE CONFIGURATION ...
Page 152: ...152 CHAPTER 17 IPX CONFIGURATION ...
Page 164: ...164 CHAPTER 19 QINQ CONFIGURATION ...
Page 172: ...172 CHAPTER 21 SHARED VLAN CONFIGURATION ...
Page 182: ...182 CHAPTER 22 PORT BASIC CONFIGURATION ...
Page 198: ...198 CHAPTER 24 PORT ISOLATION CONFIGURATION ...
Page 208: ...208 CHAPTER 25 PORT SECURITY CONFIGURATION ...
Page 224: ...224 CHAPTER 27 DLDP CONFIGURATION ...
Page 232: ...232 CHAPTER 28 MAC ADDRESS TABLE MANAGEMENT ...
Page 240: ...240 CHAPTER 29 CENTRALIZED MAC ADDRESS AUTHENTICATION CONFIGURATION ...
Page 280: ...280 CHAPTER 30 MSTP CONFIGURATION ...
Page 348: ...348 CHAPTER 35 IS IS CONFIGURATION ...
Page 408: ...408 CHAPTER 39 802 1X CONFIGURATION ...
Page 412: ...412 CHAPTER 40 HABP CONFIGURATION ...
Page 422: ...422 CHAPTER 41 MULTICAST OVERVIEW ...
Page 426: ...426 CHAPTER 42 GMRP CONFIGURATION ...
Page 480: ...480 CHAPTER 47 PIM CONFIGURATION ...
Page 506: ...506 CHAPTER 48 MSDP CONFIGURATION ...
Page 552: ...552 CHAPTER 51 TRAFFIC ACCOUNTING CONFIGURATION ...
Page 570: ...570 CHAPTER 53 HA CONFIGURATION ...
Page 582: ...582 CHAPTER 54 ARP CONFIGURATION SwitchA arp protective down recover interval 200 ...
Page 622: ...622 CHAPTER 58 DHCP RELAY AGENT CONFIGURATION ...
Page 684: ...684 CHAPTER 61 QOS CONFIGURATION ...
Page 718: ...718 CHAPTER 63 CLUSTER ...
Page 738: ...738 CHAPTER 67 UDP HELPER CONFIGURATION ...
Page 752: ...752 CHAPTER 69 RMON CONFIGURATION ...
Page 772: ...772 CHAPTER 70 NTP CONFIGURATION ...
Page 796: ...796 CHAPTER 72 FILE SYSTEM MANAGEMENT ...
Page 802: ...802 CHAPTER 73 BIMS CONFIGURATION ...
Page 814: ...814 CHAPTER 74 FTP AND TFTP CONFIGURATION ...
Page 830: ...830 CHAPTER 75 INFORMATION CENTER ...
Page 836: ...836 CHAPTER 76 DNS CONFIGURATION ...
Page 852: ...852 CHAPTER 77 BOOTROM AND HOST SOFTWARE LOADING ...
Page 858: ...858 CHAPTER 78 BASIC SYSTEM CONFIGURATION DEBUGGING ...