R3166-R3206-HP High-End Firewalls Network Management Command Reference-6PW101

175
Defining a criterion to match a source MAC address
Defining a criterion to match 802.1p priority in customer
Defining an ACL-based match criterion
If the ACL referenced in the if-match command does not exist, the class cannot be applied to hardware.
For a class, you can reference an ACL twice by its name and number with the if-match command,
respectively.
Defining a criterion to match a destination MAC address
You can configure multiple destination MAC address match criteria for a class.
A destination MAC address match criterion is significant only to Ethernet interfaces.
Defining a criterion to match a source MAC address
You can configure multiple source MAC address match criteria for a class.
A criterion to match a source MAC address is significant only to Ethernet interfaces.
Defining a criterion to match 802.1p priority in customer
• You can configure multiple 802.1p priority match criteria for a class. All the defined 802.1p values
are automatically arranged in ascending order.
• You can configure up to eight 802.1p priority values in one command line. If the same 802.1p
priority value is specified multiple times, the system considers them as one. If a packet matches one
of the defined 802.1p priority values, it matches the if-match clause.
• To delete a criterion that matches 802.1p priority values, the specified 802.1p priority values in the
command must be identical with those defined in the criterion (the sequence may be different).
Examples
# Define a match criterion for class class1 to match the packets with the destination MAC address
0050-ba27-bed3.
<Sysname> system-view
[Sysname] traffic classifier class1
[Sysname-classifier-class1] if-match destination-mac 0050-ba27-bed3
# Define a match criterion for class class2 to match the packets with the source MAC address
0050-ba27-bed2.
<Sysname> system-view
[Sysname] traffic classifier class2
[Sysname-classifier-class2] if-match source-mac 0050-ba27-bed2
# Define a match criterion for class class1 to match the packets with the customer network 802.1p priority
value 3.
<Sysname> system-view
[Sysname] traffic classifier class1
[Sysname-classifier-class1] if-match customer-dot1p 3
# Define a match criterion for class class1 to match ACL 3101.
<Sysname> system-view
[Sysname] traffic classifier class1
[Sysname-classifier-class1] if-match acl 3101
# Define a match criterion for class class1 to match the ACL named flow.