Chapter4ServiceConguration
ParameterDescription
any(third)
TheanykeywordisusedastheabbreviationofthesourceMAC
address00.00.00.00.00.00andthemask00.00.00.00.00.00.
<dest-mac>DestinationMACaddressofthetransmittedpacket.
<dmac-mask>DestinationMACmask.
any(fourth)
Theanykeywordisusedastheabbreviationofthedestination
MACaddress00.00.00.00.00.00andthemask00.00.00.00.00.00.
Guidelines
Ip-protocolrulecanmatchIPv4–speciedprotocoleld,source-speciedIP ,anysource
IP ,destination-speciedIP,anydestinationIP,DSCPeld,IPfragmenteld,coseld,
VLANeld,source-speciedMAC,anysourceMAC,destination-speciedMACandany
destinationMAC.
4.13.27ingress-aclhybridruletype-ip
Purpose
ThiscommandsetstherulethatthehybridingressACLmatchestheIPv4packet.
CommandMode
HybridingressACLcongurationmode
Syntax
rule<1-500>{permit|deny}ip{<source-ipaddr><sip-mask>|any}{<destination-ipaddr><dip-m
ask>|any}[dscp<0-63>][fragment][cos<0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac
-mask>|any][<dest-mac><dmac-mask>|any]
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
IPThisruleisonlyvalidforIPpacket.Otherpacketsignorethisrule.
<source-ipaddr>
IPaddressofthesourcenetworkorhosttransmittingpackets.Itis
a32-bitIPaddressexpressedindotteddecimalnotation.
<sip-mask>
Sourcemaskandusedforsource.Itisa32-bitIPaddress
expressedindotteddecimalnotation.
4-235
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential