Command Manual (For Soliton) – ACL
H3C S3100 Series Ethernet Switches
Chapter 1 ACL Configuration Commands
1-23
Parameters
Type
Function
Description
source
{
source-addr
source-mask
|
vlan-id
|
vlan
operator
vlan-id1
[
vlan-id2
] }*
Source MAC
address
information or
source VLAN
information
Specifies the
source MAC
address range
or source
VLAN range
for the ACL
rule
source-mac-addr
: Source MAC
address, in the format of
H-H-H.
source-mac-mask
: Mask of the
source MAC address, in the
format of H-H-H.
vlan-id
,
vlan-id1
,
vlan-id2
:
Source VLAN ID, in the range
of 1 to 4,094.
The value of operator can be
lt
(less than),
gt
(greater than),
eq
(equal to),
neq
(not equal
to) or
range
(within the range
of). Only the
range
operator
requires two port numbers as
the operands. Other operators
require only one port number
as the operand.
With the
range
operator, the
value of
vlan-id2
does not need
to be greater than that of
vlan-id1
because the device
can automatically judge the
value range.
Note that if you specify a
combination of
lt
1 or
gt
4093,
the device will convert it to
eq
0
or
eq
4094.
dest
dest-mac-addr
dest-mac-mask
Destination
MAC address
information
Specifies the
destination
MAC address
range for the
ACL rule
dest-mac-addr
: Destination
MAC address, in the format of
H-H-H.
dest-mac-mask
: Mask of the
destination MAC address, in
the format of H-H-H.
cos cos
Priority
Specifies the
802.1p priority
of the rule
cos
: VLAN priority, in the range
of 0 to 7.
time-range
time-name
Time range
information
Specifies the
time range in
which the rule
takes effect.
time-name
: specifies the name
of the time range in which the
rule is active; a string
comprising 1 to 32 characters.
type
protocol-type
protocol-mask
Protocol type
of Ethernet
frames
Specifies the
protocol type
of Ethernet
frames for the
ACL rule
protocol-type
: Protocol type.
protocol-mask
: Protocol type
mask.
