Chapter 4 Service Configuration
Parameter
Description
permit
If the condition matches, access is permitted.
deny
If the condition matches, access is denied.
arp
This rule only matches ARP message. Non-ARP message
ignores this rule.
<
sender-ipaddr
>
Sender network or host of the ARP package. It is a 32-bit IP
address expressed in dotted decimal notation.
<
sip-mask
>
Source mask and used for source. It is a 32-bit IP address
expressed in dotted decimal notation.
any
(first)
The any keyword is used as the abbreviation of the source 0.0.0.0
and the source mask 0.0.0.0.
<
target-ipaddr
>
Target network or host of the ARP package. It is a 32-bit IP
address expressed in dotted decimal notation.
<
tip-mask
>
Destination mask used for destination. It is a 32-bit IP address
expressed in dotted decimal notation.
any
(second)
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0
cos
<
0-7
>
This rule is only valid for the cos-specified message. Ignore this
rule for other messages. The range of cos is 0 to 7.
<
vlan-id
>
This rule is only valid for messages with the specified VLAN ID.
Ignore this rule for other messages. The rule of VLAN ID is 1
to 4094.
<
vlan-mask
>
Optional VLAN mask. The default value is 0xfff.
<
source-mac
>
Source MAC address of the transmitted packet.
<
smac-mask
>
Source MAC mask.
any
(third)
The any keyword is used as the abbreviation of the source MAC
address 00.00.00.00.00.00 and the mask 00.00.00.00.00.00.
<
dest-mac
>
Destination MAC address of the transmitted packet.
<
dmac-mask
>
Destination MAC mask.
any
(four)
The any keyword is used as the abbreviation of the destination
MAC address 00.00.00.00.00.00 and the mask 00.00.00.00.00.00.
Guidelines
ARP rule can match sender-specified IP, any sender IP, target-specified IP, any target IP,
cos field, VLAN field, source-specified MAC, any source MAC, destination-specified MAC
and any destination MAC.
4-241
SJ-20131111172707-003|2013-11-27 (R1.0)
ZTE Proprietary and Confidential