F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Command Reference-6PW100

248
For a class, you can reference an ACL twice by its name and number with the if-match command,
respectively.
2. Defining a criterion to match a destination MAC address
You can configure multiple destination MAC address match criteria for a class.
A destination MAC address match criterion is significant only to Ethernet interfaces.
3. Defining a criterion to match a source MAC address
You can configure multiple source MAC address match criteria for a class.
A criterion to match a source MAC address is significant only to Ethernet interfaces.
4. Defining a criterion to match DSCP values
• You can configure multiple DSCP match criteria for a class. All defined DSCP values are
automatically sorted in ascending order.
• You can configure up to eight DSCP values in one command line. If multiple identical DSCP values
are specified, the system considers them as one. If a packet matches one of the defined DSCP values,
it matches the if-match clause.
• To delete a criterion that matches DSCP values, the specified DSCP values must be identical with
those defined in the criterion (the sequence may be different).
5. Defining a criterion to match 802.1p priority in customer VLAN tags
• You can configure multiple 802.1p priority match criteria for a class. All the defined 802.1p values
are automatically arranged in ascending order.
• You can configure up to eight 802.1p priority values in one command line. If the same 802.1p
priority value is specified multiple times, the system considers them as one. If a packet matches one
of the defined 802.1p priority values, it matches the if-match clause.
• To delete a criterion that matches 802.1p priority values, the specified 802.1p priority values in the
command must be identical with those defined in the criterion (the sequence may be different).
6. Defining a criterion to match IP precedence values
• You can configure multiple IP precedence match criteria for a class. The defined IP precedence
values are automatically arranged in ascending order.
• You can configure up to eight IP precedence values in one command line. If the same IP precedence
is specified multiple times, the system considers them as one. If a packet matches one of the defined
IP precedence values, it matches the if-match clause.
• To delete a criterion that matches IP precedence values, the specified IP precedence values in the
command must be identical with those defined in the criterion (the sequence may be different).
7. Defining a criterion to match local precedence values
• You can configure multiple local precedence match criteria for a class. The defined local
precedence values are automatically arranged in ascending order.
• You can configure up to eight local precedence values in one command line. If the same local
precedence value is specified multiple times, the system considers them as one. If a packet matches
one of the defined local precedence values, it matches the if-match clause.
• To delete a criterion that matches local precedence values, the specified local precedence values
must be identical with those defined in the match criterion (the sequence may be different).
Examples
# Define a match criterion for class class1 to match the packets with their destination MAC addresses
being 0050-ba27-bed3.