Home » HP Manuals » Servers » HP 6125XLG » Manual Viewer

HP 6125XLG R2306-HP 6125XLG Blade Switch ACL and QoS Command Reference - Page 27

Usage guidelines, Examples, ICMP message name, vpn-instance, undo rule, display acl all

Add to My Manuals
Save this manual to your list of manuals

Page 27 highlights

ICMP message name source-route-failed timestamp-reply timestamp-request ttl-exceeded ICMP message type 3 14 13 11 ICMP message code 5 0 0 0 Usage guidelines When an IPv4 advanced ACL is for QoS traffic classification or packet filtering, do not specify the vpn-instance keyword or specify neq for the operator argument. Within an ACL, the permit or deny statement of each rule must be unique. If the ACL rule you are creating or editing has the same deny or permit statement as another rule in the ACL, your creation or editing attempt fails. You can edit ACL rules only when the match order is config. If no optional keywords are provided for the undo rule command, you delete the entire rule. If optional keywords or arguments are provided, you delete the specified attributes. To view rules in an ACL and their rule IDs, use the display acl all command. Examples # Create an IPv4 advanced ACL rule to permit TCP packets with the destination port 80 from 129.9.0.0/16 to 202.38.160.0/24. system-view [Sysname] acl number 3000 [Sysname-acl-adv-3000] rule permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0 0.0.0.255 destination-port eq 80 # Create IPv4 advanced ACL rules to permit all IP packets but the ICMP packets destined for 192.168.1.0/24. system-view [Sysname] acl number 3001 [Sysname-acl-adv-3001] rule deny icmp destination 192.168.1.0 0.0.0.255 [Sysname-acl-adv-3001] rule permit ip # Create IPv4 advanced ACL rules to permit inbound and outbound FTP packets. system-view [Sysname] acl number 3002 [Sysname-acl-adv-3002] rule permit tcp source-port eq ftp [Sysname-acl-adv-3002] rule permit tcp source-port eq ftp-data [Sysname-acl-adv-3002] rule permit tcp destination-port eq ftp [Sysname-acl-adv-3002] rule permit tcp destination-port eq ftp-data # Create IPv4 advanced ACL rules to permit inbound and outbound SNMP and SNMP trap packets. system-view [Sysname] acl number 3003 [Sysname-acl-adv-3003] rule permit udp source-port eq snmp [Sysname-acl-adv-3003] rule permit udp source-port eq snmptrap [Sysname-acl-adv-3003] rule permit udp destination-port eq snmp [Sysname-acl-adv-3003] rule permit udp destination-port eq snmptrap 22

Section	Page
Title Page	1
Contents	3
ACL commands	6
acl	6
acl copy	7
acl logging interval	8
acl name	9
description	9
display acl	10
display packet-filter	11
display packet-filter statistics	13
display packet-filter statistics sum	14
display packet-filter verbose	16
display qos-acl resource	17
packet-filter	18
packet-filter default deny	19
reset acl counter	20
reset packet-filter statistics	21
rule (Ethernet frame header ACL view)	22
rule (IPv4 advanced ACL view)	23
rule (IPv4 basic ACL view)	28
rule (IPv6 advanced ACL view)	29
rule (IPv6 basic ACL view)	34
rule comment	36
step	37
QoS policy commands	39
Traffic class commands	39
display traffic classifier	39
if-match	40
Defining an ACL-based match criterion	42
Defining a criterion to match a destination MAC address	42
Defining a criterion to match a source MAC address	42
Defining a criterion to match DSCP values	42
Defining a criterion to match 802.1p priority in customer or service provider VLAN tags	42
Defining a criterion to match IP precedence values	42
Defining a criterion to match CVLANs or SVLANs	42
Defining a criterion to match control plane protocols	43
traffic classifier	45
Traffic behavior commands	45
accounting	45
car	46
display traffic behavior	47
filter	49
nest top-most	49
redirect	50
remark customer-vlan-id	51
remark dot1p	51
remark drop-precedence	52
remark dscp	53
remark ip-precedence	54
remark local-precedence	55
remark qos-local-id	55
remark service-vlan-id	56
traffic behavior	56
QoS policy commands	57
classifier behavior	57
control-plane	58
display qos policy	58
display qos policy control-plane	59
display qos policy control-plane pre-defined	61
display qos policy global	61
display qos policy interface	63
display qos vlan-policy	64
qos apply policy (interface view, control plane view)	66
qos apply policy global	67
qos policy	67
qos vlan-policy	68
reset qos policy control-plane	69
reset qos policy global	69
reset qos vlan-policy	70
Priority mapping commands	71
Priority map commands	71
display qos map-table	71
import	72
qos map-table	72
Port priority commands	73
qos priority	73
Priority trust mode commands	74
display qos trust interface	74
qos trust	74
GTS and rate limit commands	76
GTS commands	76
display qos gts interface	76
qos gts	76
Rate limit commands	77
display qos lr interface	77
qos lr	78
Congestion management commands	80
SP commands	80
display qos sp	80
qos sp	80
WRR commands	81
display qos wrr interface	81
qos wrr	82
qos wrr { byte-count \| weight }	83
qos wrr group sp	84
WFQ commands	85
display qos wfq interface	85
qos bandwidth queue	86
qos wfq	87
qos wfq { byte-count \| weight }	88
qos wfq group sp	89
Congestion avoidance commands	90
display qos wred interface	90
display qos wred table	90
qos wred apply	92
qos wred table	92
queue	93
queue ecn	94
queue weighting-constant	95
Aggregate CAR commands	97
car name	97
display qos car name	97
qos car	98
reset qos car name	100
Data buffer commands	101
buffer apply	101
buffer queue guaranteed	101
buffer queue shared	102
buffer total-shared	103
burst-mode enable	104
display buffer	105
Time range commands	107
display time-range	107
time-range	107
Support and other resources	110
Contacting HP	110
Subscription service	110
Related information	110
Documents	110
Websites	110
Conventions	111
Command conventions	111
GUI conventions	111
Symbols	111
Network topology icons	112
Port numbering in examples	112

Match case Limit results 1 per page

ICMP message name

ICMP message type

ICMP message code

source-route-failed

timestamp-reply

timestamp-request

ttl-exceeded

Usage guidelines

When an IPv4 advanced ACL is for QoS traffic classification or packet filtering, do not specify the

vpn-instance

keyword or specify

neq

for the

operator

argument.

Within an ACL, the permit or deny statement of each rule must be unique. If the ACL rule you are creating

or editing has the same deny or permit statement as another rule in the ACL, your creation or editing

attempt fails.

You can edit ACL rules only when the match order is config.

If no optional keywords are provided for the

undo rule

command, you delete the entire rule. If optional

keywords or arguments are provided, you delete the specified attributes.

To view rules in an ACL and their rule IDs, use the

display acl all

command.

Examples

# Create an IPv4 advanced ACL rule to permit TCP packets with the destination port 80 from

129.9.0.0/16 to 202.38.160.0/24.

<Sysname> system-view

[Sysname] acl number 3000

[Sysname-acl-adv-3000] rule permit tcp source 129.9.0.0 0.0.255.255 destination

202.38.160.0 0.0.0.255 destination-port eq 80

# Create IPv4 advanced ACL rules to permit all IP packets but the ICMP packets destined for

192.168.1.0/24.

<Sysname> system-view

[Sysname] acl number 3001

[Sysname-acl-adv-3001] rule deny icmp destination 192.168.1.0 0.0.0.255

[Sysname-acl-adv-3001] rule permit ip

# Create IPv4 advanced ACL rules to permit inbound and outbound FTP packets.

<Sysname> system-view

[Sysname] acl number 3002

[Sysname-acl-adv-3002] rule permit tcp source-port eq ftp

[Sysname-acl-adv-3002] rule permit tcp source-port eq ftp-data

[Sysname-acl-adv-3002] rule permit tcp destination-port eq ftp

[Sysname-acl-adv-3002] rule permit tcp destination-port eq ftp-data

# Create IPv4 advanced ACL rules to permit inbound and outbound SNMP and SNMP trap packets.

<Sysname> system-view

[Sysname] acl number 3003

[Sysname-acl-adv-3003] rule permit udp source-port eq snmp

[Sysname-acl-adv-3003] rule permit udp source-port eq snmptrap

[Sysname-acl-adv-3003] rule permit udp destination-port eq snmp

[Sysname-acl-adv-3003] rule permit udp destination-port eq snmptrap