HP 6125G HP 6125G & 6125G/XG Blade Switches ACL and QoS Command Refere - Page 24

Parameters, Function, Description, Table 6

Page 24 highlights

Table 6 Match criteria and other rule information for IPv4 advanced ACL rules Parameters Function Description source { sour-addr sour-wildcard | any } Specifies a source address The sour-addr sour-wildcard arguments represent a source IP address and wildcard mask in dotted decimal notation. An all-zero wildcard specifies a host address. The any keyword specifies any source IP address. destination { dest-addr dest-wildcard | any } Specifies a destination address The dest-addr dest-wildcard arguments represent a destination IP address and wildcard mask in dotted decimal notation. An all-zero wildcard specifies a host address. The any keyword represents any destination IP address. counting Counts the number of times the IPv4 ACL rule has been matched - in hardware. precedence precedence Specifies an IP precedence value The precedence argument can be a number in the range of 0 to 7, or in words, routine (0), priority (1), immediate (2), flash (3), flash-override (4), critical (5), internet (6), or network (7). tos tos Specifies a ToS preference The tos argument can be a number in the range of 0 to 15, or in words, max-reliability (2), max-throughput (4), min-delay (8), min-monetary-cost (1), or normal (0). dscp dscp Specifies a DSCP priority The dscp argument can be a number in the range of 0 to 63, or in words, af11 (10), af12 (12), af13 (14), af21 (18), af22 (20), af23 (22), af31 (26), af32 (28), af33 (30), af41 (34), af42 (36), af43 (38), cs1 (8), cs2 (16), cs3 (24), cs4 (32), cs5 (40), cs6 (48), cs7 (56), default (0), or ef (46). vpn-instance vpn-instance-name Applies the rule to packets in a VPN instance The vpn-instance-name argument takes a case-sensitive string of 1 to 31 characters. If no VPN instance is specified, the rule applies only to non-VPN packets. fragment Applies the rule to only non-first fragments Without this keyword, the rule applies to all fragments and non-fragments. 19

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104

19
Table 6
Match criteria and other rule information for IPv4 advanced ACL rules
Parameters
Function
Description
source
{
sour-addr sour-wildcard
|
any
}
Specifies a source address
The
sour-addr sour-wildcard
arguments represent a source IP
address and wildcard mask in
dotted decimal notation. An all-zero
wildcard specifies a host address.
The
any
keyword specifies any
source IP address.
destination
{
dest-addr dest-wildcard
|
any
}
Specifies a destination address
The
dest-addr dest-wildcard
arguments represent a destination IP
address and wildcard mask in
dotted decimal notation. An all-zero
wildcard specifies a host address.
The
any
keyword represents any
destination IP address.
counting
Counts the number of times the
IPv4 ACL rule has been matched
in hardware.
precedence
precedence
Specifies an IP precedence
value
The
precedence
argument can be a
number in the range of 0 to 7, or in
words,
routine
(0),
priority
(1),
immediate
(2),
flash
(3),
flash-override
(4),
critical
(5),
internet
(6), or
network
(7).
tos
tos
Specifies a ToS preference
The
tos
argument can be a number
in the range of 0 to 15, or in words,
max-reliability
(2),
max-throughput
(4),
min-delay
(8),
min-monetary-cost
(1), or
normal
(0).
dscp
dscp
Specifies a DSCP priority
The
dscp
argument can be a number
in the range of 0 to 63, or in words,
af11
(10),
af12
(12),
af13
(14),
af21
(18),
af22
(20),
af23
(22),
af31
(26),
af32
(28),
af33
(30),
af41
(34),
af42
(36),
af43
(38),
cs1
(8),
cs2
(16),
cs3
(24),
cs4
(32),
cs5
(40),
cs6
(48),
cs7
(56),
default
(0),
or
ef
(46).
vpn-instance
vpn-instance-name
Applies the rule to packets in a
VPN instance
The
vpn-instance-name
argument
takes a case-sensitive string of 1 to
31 characters.
If no VPN instance is specified, the
rule applies only to non-VPN
packets.
fragment
Applies the rule to only non-first
fragments
Without this keyword, the rule
applies to all fragments and
non-fragments.