2-5z You can modify the match order of an ACL with the acl number acl-number [ name acl-name ]match-order { auto | config } command, but only when the ACL does not contain any rules.z The rule specified in the rule comment command must already exist.Configuring an Ethernet Frame Header ACLEthernet frame header ACLs match packets based on Layer 2 protocol header fields such as sourceMAC address, destination MAC address, 802.1p priority (VLAN priority), and link layer protocol type.They are numbered in the range 4000 to 4999.Configuration PrerequisitesIf you want to reference a time range in a rule, define it with the time-range command first.Configuration ProcedureFollow these steps to configure an Ethernet frame header ACL:To do… Use the command… RemarksEnter system view system-view ––Create an Ethernet frameheader ACL and enter its viewacl number acl-number [ nameacl-name ] [ match-order{ auto | config } ]RequiredThe default match order isconfig.If you specify a name for anIPv4 ACL when creating theACL, you can use the acl nameacl-name command to enterthe view of the ACL later.Create or modify a rulerule [ rule-id ] { deny | permit }[ cos vlan-pri | dest-macdest-addr dest-mask | lsaplsap-type lsap-type-mask |source-mac sour-addrsource-mask | time-rangetime-range-name | typeprotocol-typeprotocol-type-mask ] *RequiredTo create or modify multiplerules, repeat this step.Note that the lsap keyword isnot supported if the ACL is tobe referenced by a QoS policyfor traffic classification.Set the rule numbering step step step-value Optional5 by defaultConfigure a description for theEthernet frame header ACL description textOptionalBy default, an Ethernet frameheader ACL has no ACLdescription.
