Operation Manual – ACLH3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration1-9z The settings to be specified in the rule, such as source and destination MACaddresses, VLAN priorities, and Layer 2 protocol types, are determined.II. Configuration ProcedureTable 1-4 Define a Layer 2 ACL ruleOperation Command DescriptionEnter system view system-view —Create a Layer 2ACL and enterlayer 2 ACL viewacl number acl-number RequiredDefine an ACL rule rule [ rule-id ] { permit |deny } rule-stringRequiredFor information aboutrule-string, refer to ACLCommands.Assign adescription stringto the ACL rulerule rule-id comment text OptionalNo description by defaultAssign adescription stringto the ACLdescription text OptionalNo description by defaultNote that:z You can modify any existent rule of the Layer2 ACL and the unmodified part of theACL remains.z If you do not specify the rule-id argument when creating an ACL rule, the rule willbe numbered automatically. If the ACL has no rules, the rule is numbered 0;otherwise, the number of the rule will be the greatest rule number plus one. If thecurrent greatest rule number is 65534, however, the system will display an errormessage and you need to specify a number for the rule.z The content of a modified or created rule cannot be identical with the content ofany existing rules; otherwise the rule modification or creation will fail, and thesystem prompts that the rule already exists.III. Configuration Example# Configure ACL 4000 to deny packets sourced from the MAC address 000d-88f5-97ed,destined for the MAC address 0011-4301-991e, and with their 802.1p priority being 3. system-view[Sysname] acl number 4000[Sysname-acl-ethernetframe-4000] rule deny cos 3 source 000d-88f5-97edffff-ffff-ffff dest 0011-4301-991e ffff-ffff-ffff# Display the configuration information of ACL 4000.
