Operation Manual – ACL
H3C S3610&S5510 Series Ethernet Switches
Chapter 2 IPv4 ACL Configuration
2-7
[Sysname-acl-adv-3000] display acl 3000
Advanced ACL 3000, named -none-, 1 rule,
ACL's step is 5
rule 0 permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0
0.0.0.255 destination-port eq www
2.4 Configuring an Ethernet Frame Header ACL
Ethernet frame header ACLs filter packets based on Layer 2 protocol header fields
such as source MAC address, destination MAC address, 802.1p priority (VLAN priority),
and link layer protocol type. They are numbered in the range 4000 to 4999.
2.4.1 Configuration Prerequisites
If you want to reference a time range to a rule, define it with the
time-range
command
first.
2.4.2 Configuration Procedure
Follow these steps to configure an Ethernet frame header ACL:
To do…
Use the command…
Remarks
Enter system view
system-view
––
Create and enter
Ethernet frame
header ACL view
acl number
acl-number
[
name
acl-name
] [
match-order
{
auto
|
config
} ]
Required
The default match order is
config
.
If you specify a name for
an IPv4 ACL when
creating the ACL, you can
use the
acl
name
acl-name
command to
enter the view of the ACL
later.
Create or modify a
rule
rule
[
rule-id
] {
deny
|
permit
}
[
cos vlan-pri | dest-mac
dest-addr
dest-mask | lsap
lsap-code
lsap-wildcard |
source-mac
sour-addr
source-mask
|
time-range
time-name | type
type-code
type-wildcard
] *
Required
To create multiple rules,
repeat this step.
Set a rule numbering
step
step
step-value
Optional
The default step is 5.
Create an ACL
description
description
text
Optional
By default, no IPv4 ACL
description is present.
