Ericsson ECN330, Руководство пользователя

Страница: 184 / 1226

Configuring the ECN330-switch
178
1553-KDU 137 365 Uen D 2006-06-16
are enough available masks based on the current mask information
stored in RAM. If there are not enough available masks, the ECN330-
switch responds with an error to the console interface such as "There
are 4 user masks available, 3 used for port ACL, 1 used for VLAN ACL,
no mask available now." If this kind of message appears, remove a port
ACL mask (see section 6.6.2 on page 166). Enough masks should then
be made available to create a VLAN ACL.
6.6.5.1 Configuring a VLAN Mask for IP ACLs
This mask defines the fields to check in the IP header.
Command Usage
• If Service Type "DSCP" is enabled, neither "TOS" nor (IP) "Precedence"
can be enabled. However, both "TOS" and "Precedence" can be
enabled if "DSCP" is not selected.
• Masks that include an entry for a Layer 4 protocol source port or
destination port can only be applied to packets with a header length of
exactly five bytes.
Command Attributes
• Source/Destination Address Type – Specifies the source or
destination IP address. Use “Any” to match any address, “Host” to
specify a host address (not a subnet), or “IP” to specify a range of
addresses. (Options: Any, Host, IP; Default: Any)
• Source/Destination Subnet Mask – Source or destination address of
rule must match this bitmask. (See the description for Subnet Mask on
page 160.)
• Protocol Bitmask – Checks the protocol field.
• Service Type Mask – Check the rule for the specified priority type.
(Options: Precedence, TOS, DSCP; Default: TOS)
• Source/Destination Port Bit Mask – Protocol port of rule must match
this bitmask. (Range: 0-65535)
• Control Code Bit Mask – Control flags of rule must match this bitmask.
(Range: 0-63)