38
When you configure an
if-match hardware-address
rule, follow these guidelines:
•
The hardware address type supports only the MAC address. A rule does not match clients with
hardware addresses of other types.
•
The specified hardware address must be of the same length as the client hardware addresses
to be matched. To match MAC addresses, the specified hardware address must be six bytes
long.
•
The fs and 0s in the mask for the hardware match operation can be noncontiguous. For
example, the rule
if-match rule
1
hardware-address
0094-0000-1100
mask
ffff-0000-ff00 matches hardware addresses in which the first two bytes are 0094 and the fifth
byte is 11.
When you configure an
if-match option
rule, follow these guidelines:
•
To match packets that contain an option, specify only the
option-code
argument.
•
To match a hexadecimal number by AND operations, specify the
option
option-code hex
hex-string
mask
mask
options.
•
To match a hexadecimal number directly, specify the
option
option-code
hex
hex-string
[
offset
offset
length
length
|
partial
]
options. If you do not
specify the
offset
,
length
, or
partial
parameter, a packet matches a rule if the option
content starts with the hexadecimal number.
•
To match an ASCII string, specify the
option
option-code
ascii
ascii-string
[
offset
offset
|
partial
]
options. If you do not specify the
offset
or
partial
parameter, a packet matches a rule if the option content starts with the ASCII string.
Examples
# Configure match rule
1
for DHCP user class
exam
to match DHCP requests in which the hardware
address is six bytes long and begins with
0094
.
<Sysname> system-view
[Sysname] dhcp class exam
[Sysname-dhcp-class-exam] if-match rule 1 hardware-address 0094-0000-0101 mask
ffff-0000-0000
# Configure match rule
2
for DHCP user class
exam
to match DHCP requests that contain Option
82.
<Sysname> system-view
[Sysname] dhcp class exam
[Sysname-dhcp-class-exam] if-match rule 2 option 82
# Configure match rule
3
for DHCP user class
exam
. The rule matches DHCP requests in which the
highest bit of the fourth byte in Option 82 is the hexadecimal number
1
.
<Sysname> system-view
[Sysname] dhcp class exam
[Sysname-dhcp-class-exam] if-match rule 3 option 82 hex 00000080 mask 00000080
# Configure match rule
4
for DHCP user class
exam
. The rule matches DHCP requests in which the
first three bytes of Option 82 are the hexadecimal number
13ae92
.
<Sysname> system-view
[Sysname] dhcp class exam
[Sysname-dhcp-class-exam] if-match rule 4 option 82 hex 13ae92 offset 0 length 3
# Configure match rule
5
for DHCP user class
exam
. The rule matches DHCP requests in which the
Option 82 contains the hexadecimal number
13ae
.
<Sysname> system-view
[Sysname] dhcp class exam
[Sysname-dhcp-class-exam] if-match rule 5 option 82 hex 13ae partial
Содержание SOHO IE4300
Страница 114: ...ii tftp client ipv6 source 41 tftp client source 41 tftp ipv6 42 tftp server acl 44 tftp server ipv6 acl 44...
Страница 285: ...i Contents Tcl commands 1 cli 1 tclquit 1 tclsh 2...
Страница 288: ...i Contents Python commands 1 exit 1 python 1 python filename 2...
Страница 291: ...i Contents Automatic configuration commands 1 autodeploy udisk enable 1...
Страница 323: ...25 Sysname Ten GigabitEthernet1 0 51 undo shutdown Related commands irf port...
Страница 396: ...i Contents Bulk interface configuration commands 1 display interface range 1 interface range 1 interface range name 3...
Страница 460: ...i Contents Port isolation commands 1 display port isolate group 1 port isolate enable 2 port isolate group 2...
Страница 465: ...ii stp vlan enable 55 vlan mapping modulo 55...
Страница 589: ...60 Examples Enable LLDP for automatic IP phone discovery Sysname system view Sysname voice vlan track lldp...
Страница 602: ...12 Related commands display mvrp statistics...
Страница 609: ...i Contents VLAN mapping commands 1 display vlan mapping 1 vlan mapping 2...
Страница 678: ...9 Related commands reset pppoe relay statistics...
Страница 846: ...i Contents Basic IP forwarding commands 1 display fib 1 ip forwarding table save 2...
Страница 1073: ...i Contents HTTP redirect commands 1 http redirect https port 1 http redirect ssl server policy 1...
Страница 1087: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1340: ...9 Sysname ipv6 route static default preference 120 Related commands display ipv6 routing table protocol...
Страница 1649: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1668: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 1770: ...i Contents Time range commands 1 display time range 1 time range 1...
Страница 2026: ...34 Related commands display mac authentication...
Страница 2028: ...ii...
Страница 2143: ...i Contents User profile commands 1 display user profile 1 user profile 2...
Страница 2308: ...61 ipsec transform set...
Страница 2473: ...i Contents TCP attack prevention commands 1 tcp anti naptha enable 1 tcp check state interval 1 tcp state 2...
Страница 2531: ...i Contents SAVI commands 1 ipv6 savi down delay 1 ipv6 savi log enable 1 ipv6 savi strict 2...
Страница 2534: ...3 Sysname ipv6 savi strict Related commands ipv6 verify source...
Страница 2541: ...i Contents Crypto engine commands 1 display crypto engine 1 display crypto engine statistics 1 reset crypto engine statistics 3...
Страница 2545: ...i Contents FIPS commands 1 display crypto version 1 display fips status 1 fips mode enable 2 fips self test 4...
Страница 2791: ...14 Sysname track 1 Related commands delay display track...
Страница 2939: ...9 sntp authentication keyid sntp reliable authentication keyid...
Страница 2967: ...27 Related commands apply poe profile poe enable poe max power interface view poe priority...
Страница 3240: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...
Страница 3263: ...Documentation feedback You can e mail your comments about product documentation to info h3c com We appreciate your comments...