2-6Configuring an Ethernet Frame Header ACLEthernet frame header ACLs match packets based on Layer 2 protocol header fields such as sourceMAC address, destination MAC address, 802.1p priority (VLAN priority), and link layer protocol type.They are numbered in the range 4000 to 4999.Configuration PrerequisitesIf you want to reference a time range in a rule, define it with the time-range command first.Configuration ProcedureFollow these steps to configure an Ethernet frame header ACL:To do… Use the command… RemarksEnter system view system-view ––Create an Ethernetframe header ACLand enter its viewacl number acl-number [ nameacl-name ] [ match-order { auto |config } ]RequiredThe default match order is config.If you specify a name for an IPv4 ACLwhen creating the ACL, you can usethe acl name acl-name command toenter the view of the ACL later.Create or modify arulerule [ rule-id ] { deny | permit } [ cosvlan-pri | dest-mac dest-addrdest-mask | lsap lsap-codelsap-wildcard | source-macsour-addr source-mask | time-rangetime-range-name | type type-codetype-wildcard ] *RequiredTo create or modify multiple rules,repeat this step.Note that the lsap keyword is notsupported if the ACL is to bereferenced by a QoS policy for trafficclassification.Set the rulenumbering step step step-value Optional5 by defaultConfigure adescription for theEthernet frameheader ACLdescription textOptionalBy default, an Ethernet frame headerACL has no ACL description.Configure a ruledescription rule rule-id comment textOptionalBy default, an Ethernet frame headerACL rule has no rule description.
