HP 6125G HP 6125G & 6125G/XG Blade Switches ACL and QoS Command Refere - Page 44

Defining an ACL-based match criterion, Defining a criterion to match a destination MAC address

Page 44 highlights

Use undo if-match to delete a match criterion. When defining match criteria, use the usage guidelines described in these subsections. Defining an ACL-based match criterion If the ACL referenced in the if-match command does not exist, the class cannot be applied to hardware. For a class, you can reference an ACL twice by its name and number, respectively, with the if-match command. Defining a criterion to match a destination MAC address You can configure multiple destination MAC address match criteria for a class. Defining a criterion to match a source MAC address You can configure multiple source MAC address match criteria for a class. Defining a criterion to match DSCP values • You can configure multiple DSCP match criteria for a class. All defined DSCP values are automatically sorted in ascending order. • To delete a criterion that matches DSCP values, the specified DSCP values must be identical with those defined in the criterion (the sequence may be different). Defining a criterion to match 802.1p priority in customer or service provider VLAN tags • You can configure multiple 802.1p priority match criteria for a class. All the defined 802.1p values are automatically arranged in ascending order. • To delete a criterion that matches 802.1p priority values, the specified 802.1p priority values in the command must be identical with those defined in the criterion (the sequence may be different). Defining a criterion to match IP precedence values • You can configure multiple IP precedence match criteria for a class. The defined IP precedence values are automatically arranged in ascending order. • To delete a criterion that matches IP precedence values, the specified IP precedence values in the command must be identical with those defined in the criterion (the sequence may be different). Defining a criterion to match customer network VLAN IDs or service provider network VLAN IDs • You can configure multiple VLAN ID match criteria for a class. The defined VLAN IDs are automatically arranged in ascending order. • You can configure multiple VLAN IDs in one command line. If the same VLAN ID is specified multiple times, the system considers them as one. If a packet matches one of the defined VLAN IDs, it matches the if-match clause. • To delete a criterion that matches VLAN IDs, the specified VLAN IDs in the command must be identical with those defined in the criterion (the sequence may be different). Related commands: traffic classifier. Examples # Define a match criterion for class class1 to match the packets with their destination MAC addresses being 0050-ba27-bed3. system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match destination-mac 0050-ba27-bed3 39

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104

39
Use
undo if-match
to delete a match criterion.
When defining match criteria, use the usage guidelines described in these subsections.
Defining an ACL-based match criterion
If the ACL referenced in the
if-match
command does not exist, the class cannot be applied to hardware.
For a class, you can reference an ACL twice by its name and number, respectively, with the
if-match
command.
Defining a criterion to match a destination MAC address
You can configure multiple destination MAC address match criteria for a class.
Defining a criterion to match a source MAC address
You can configure multiple source MAC address match criteria for a class.
Defining a criterion to match DSCP values
You can configure multiple DSCP match criteria for a class. All defined DSCP values are
automatically sorted in ascending order.
To delete a criterion that matches DSCP values, the specified DSCP values must be identical with
those defined in the criterion (the sequence may be different).
Defining a criterion to match 802.1p priority in customer or service provider VLAN tags
You can configure multiple 802.1p priority match criteria for a class. All the defined 802.1p values
are automatically arranged in ascending order.
To delete a criterion that matches 802.1p priority values, the specified 802.1p priority values in the
command must be identical with those defined in the criterion (the sequence may be different).
Defining a criterion to match IP precedence values
You can configure multiple IP precedence match criteria for a class. The defined IP precedence
values are automatically arranged in ascending order.
To delete a criterion that matches IP precedence values, the specified IP precedence values in the
command must be identical with those defined in the criterion (the sequence may be different).
Defining a criterion to match customer network VLAN IDs or service provider network VLAN IDs
You can configure multiple VLAN ID match criteria for a class. The defined VLAN IDs are
automatically arranged in ascending order.
You can configure multiple VLAN IDs in one command line. If the same VLAN ID is specified
multiple times, the system considers them as one. If a packet matches one of the defined VLAN IDs,
it matches the
if-match
clause.
To delete a criterion that matches VLAN IDs, the specified VLAN IDs in the command must be
identical with those defined in the criterion (the sequence may be different).
Related commands:
traffic classifier
.
Examples
# Define a match criterion for class
class1
to match the packets with their destination MAC addresses
being 0050-ba27-bed3.
<Sysname> system-view
[Sysname] traffic classifier class1
[Sysname-classifier-class1] if-match destination-mac 0050-ba27-bed3