Command Manual – ACL
H3C S7500E Series Ethernet Switches
Chapter 1 ACL Configuration Commands
1-19
1.2.9 rule (in Ethernet frame header ACL view)
Syntax
rule
[
rule-id
] {
deny
|
permit
} [
cos vlan-pri
|
dest-mac
dest-addr
dest-mask
|
lsap
lsap-code
lsap-wildcard
|
source-mac
sour-addr
source-mask
|
time-range
time-name
|
type
type-code
type-wildcard
] *
undo
rule
rule-id
View
Ethernet frame header ACL view
Parameters
rule-id
: Ethernet frame header ACL rule number in the range 0 to 65534.
deny
: Defines a deny statement to drop matched packets.
permit
: Defines a permit statement to allow matched packets to pass.
cos vlan-pri:
Defines an 802.1p priority. The
vlan-pri
argument takes a value in the
range 0 to 7; or its equivalent in words,
best-effort
,
background
,
spare
,
excellent-effort
,
controlled-load
,
video
,
voice
, or
network-management
.
dest-mac
dest-addr
dest-mask:
Specifies a destination MAC address range. The
dest-addr
and
dest-mask
arguments indicate a destination MAC address and mask in
xxxx-xxxx-xxxx format.
lsap lsap-code
lsap-wildcard:
Defines the DSAP and SSAP fields in the LLC
encapsulation. The
lsap-code
argument is a 16-bit hexadecimal number indicating
frame encapsulation. The
lsap-wildcard
argument is a 16-bit hexadecimal number
indicating the wildcard of the LSAP code.
source-mac
sour-addr
source-mask:
Specifies a source MAC address range. The
sour-addr
and
sour-mask
arguments indicate a source MAC address and mask in
xxxx-xxxx-xxxx format.
time-range
time-name:
Specifies the time range in which the rule can take effect. The
time-name
argument comprises 1 to 32 characters. It is case insensitive and must start
with an English letter. To avoid confusion, this name cannot be all.
type
type-code
type-wildcard:
Defines a link layer protocol. The
type-code
argument is
a 16-bit hexadecimal number indicating frame type. It is corresponding to the type-code
field in Ethernet_II and Ethernet_SNAP frames. The
type-wildcard
argument is a 16-bit
hexadecimal number indicating the wildcard.
Description
Use the
rule
command to create an Ethernet frame header ACL rule or modify the rule
if it has existed.
Use the
undo
rule
command to remove an Ethernet frame header ACL rule.
