Chapter4ServiceConguration
ParameterDescription
cos<0-7>
Thisruleisonlyvalidforthecos-speciedmessage.Ignorethis
ruleforothermessages.Therangeofcosis0to7.
<vlan-id>
ThisruleisonlyvalidformessageswiththespeciedVLANID.
Ignorethisruleforothermessages.TheruleofVLANIDis1
to4094.
<vlan-mask>OptionalVLANmask.Thedefaultvalueis0xfff.
<source-mac>SourceMACaddressofthetransmittedpacket.
<smac-mask>SourceMACmask.
any(fourth)
TheanykeywordisusedastheabbreviationofsourceMAC
address00.00.00.00.00.00andmask00.00.00.00.00.00.
<dest-mac>DestinationMACaddressofthetransmittedpacket.
<dmac-mask>DestinationMACaddressofthetransmittedpacket.
any(fth)
TheanykeywordisusedastheabbreviationofdestinationMAC
address00.00.00.00.00.00andmask00.00.00.00.00.00.
Guidelines
TheUDPrulecanmatchsource-speciedIPs,anysourceIPs,UDPsourceportnumbers,
destination-speciedIPs,anydestinationIPs,UDPdestinationportnumbers,DSCPelds,
IPfragmentelds,coselds,VLANelds,source-speciedMACs,anysourceMACs,
destination-speciedMACs,andanydestinationMACs.Therulecanbeboundtooneor
allports.
4.13.43ingress-aclglobalruletype-arp
Purpose
ThiscommandsetstherulethattheglobalingressACLmatchestheARPpacket.
CommandMode
GlobalingressACLcongurationmode
Syntax
rule<1-500>{permit|deny}port{<1-28>|any}arp{<sender-ipaddr><sip-mask>|any}{<target
-ipaddr><tip-mask>|any}[cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>|an
y][<dest-mac><dmac-mask>|any]
ParameterDescription
ParameterDescription
<1-16>Globalrulenumber.
4-255
SJ-20130731155059-003|2013-11-27(R1.0)ZTEProprietaryandCondential