HP 6125G HP 6125G & 6125G/XG Blade Switches ACL and QoS Configuration - Page 25

Configuration restrictions and guidelines, Configuration procedure, match-criteria

Page 25 highlights

Configuration restrictions and guidelines • If a class that uses the AND operator has multiple if-match acl, if-match acl ipv6, if-match customer-vlan-id or if-match service-vlan-id clauses, a packet that matches any of the clauses matches the class. • To successfully execute the traffic behavior associated with a traffic class that uses the AND operator, define only one if-match clause for any of the following match criteria and input only one value for any of the following list arguments. To create multiple if-match clauses for these match criteria or specify multiple values for the list arguments, specify the operator of the class as OR and use the if-match command multiple times. { customer-dot1p 8021p-list { destination-mac mac-address { dscp dscp-list { ip-precedence ip-precedence-list { service-dot1p 8021p-list { source-mac mac-address Configuration procedure To define a class: Step 1. Enter system view. 2. Create a class and enter class view. 3. Configure match criteria. Command system-view traffic classifier tcl-name [ operator { and | or } ] if-match match-criteria Remarks N/A By default, the operator of a class is AND. The operator of a class can be AND or OR: • AND-A packet is assigned to a class only when the packet matches all the criteria in the class. • OR-A packet is assigned to a class if it matches any of the criteria in the class. N/A match-criteria: Match criterion. Table 2 The value range for the match-criteria argument Option acl [ ipv6 ] { acl-number | name acl-name } any Description Matches an ACL. The acl-number argument ranges from 2000 to 3999 for an IPv4 ACL, 2000 to 3999 for an IPv6 ACL, and 4000 to 4999 for an Ethernet frame header ACL. The acl-name argument is a case-insensitive string of 1 to 63 characters, which must start with an alphabetic letter from a to z (or A to Z), and to avoid confusion, cannot be all. Matches all packets. 19

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84

19
Configuration restrictions and guidelines
If a class that uses the AND operator has multiple
if-match
acl
,
if-match acl ipv6
,
if-match
customer-vlan-id
or
if-match
service-vlan-id
clauses, a packet that matches any of the clauses
matches the class.
To successfully execute the traffic behavior associated with a traffic class that uses the AND operator,
define only one
if-match
clause for any of the following match criteria and input only one value for
any of the following
list
arguments. To create multiple
if-match
clauses for these match criteria or
specify multiple values for the
list
arguments, specify the operator of the class as OR and use the
if-match
command multiple times.
{
customer-dot1p
8021p-list
{
destination-mac
mac-address
{
dscp
dscp-list
{
ip-precedence
ip-precedence-list
{
service-dot1p
8021p-list
{
source-mac
mac-address
Configuration procedure
To define a class:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a class and
enter class view.
traffic classifier
tcl-name
[
operator
{
and
|
or
} ]
By default, the operator of a class is AND.
The operator of a class can be AND or OR:
AND
—A packet is assigned to a class only when
the packet matches all the criteria in the class.
OR
—A packet is assigned to a class if it matches
any of the criteria in the class.
3.
Configure match
criteria.
if-match
match-criteria
N/A
match-criteria
: Match criterion.
Table 2
The value range for the
match-criteria
argument
Option
Description
acl
[
ipv6
] {
acl-numbe
r
|
name
acl-name
}
Matches an ACL.
The
acl-number
argument ranges from 2000 to 3999 for an IPv4 ACL, 2000
to 3999 for an IPv6 ACL, and 4000 to 4999 for an Ethernet frame header
ACL.
The
acl-name
argument is a case-insensitive string of 1 to 63 characters, which
must start with an alphabetic letter from a to z (or A to Z), and to avoid
confusion, cannot be
all
.
any
Matches all packets.