3Com 5500G-EI Command Reference Guide - Page 288

288 CHAPTER 8: USING QOS/ACL COMMANDS icmp-type type code: Appears when protocol is icmp. type code specifies an ICMP packet. type represents the type of ICMP packet, notated by a character or a number which ranges from 0 to 255; code represents ICMP code, which appears when the protocol is "icmp" and the type of packet is not notated by a character, ranging from 0 to 255. established: Means that it is only effective to the first SYN packet established by TCP, appears when protocol is tcp. precedence precedence: IP predence, can be a name or a number ranging from 0 to 7. tos tos: ToS (Type of Service) value, can be a name or a number ranging from 0 to 15. Packets can be classified according to TOS value. dscp dscp: DSCP (Differentiated Services Code Point) value, can be a name or a number ranging from 0 to 63. Packets can be classified according to DSCP value. fragment: Means this rule is only effective for fragment packets and is ignored for non-fragment packets. Parameters specific to Layer 2 ACL: source { source-vlan-id | source-mac-addr source-mac-wildcard }*: The source information of a packet, source-vlan-id represents source VLAN of the packet, source-mac-addr source-mac-wildcard represents source MAC address of the packet. For example, if you set source-mac-wildcard to 0-0-ffff, it means that you will take the last 16 bits of source MAC address as the rule of traffic classification. dest { dest-vlan-id | dest-mac-addr dest-mac-wildcard }*: The destination information of a packet: dest-mac-addr dest-mac-wildcard represents the the packet's destination MAC address. For example, if you set source-mac-wildcard to 0-0-ffff, it means that you will take the last 16 bits of source MAC address as the rule of traffic classification. type protocol-type protocol-type-mask: Protocol type carried by the Ethernet frame. lsap lsap-type lsap-type-mask: lsap type carried by the Ethernet frame. Description Use the rule command to add a subrule to an ACL. Use the undo rule command to cancel a subrule from an ACL. You can define several subrules for an ACL. If you include parameters when using the undo rule command, the system only deletes the corresponding content of the subrule. For related configurations, refer to command acl. Example Add a subrule to an advanced ACL: