R3721-F3210-F3171-HP High-End Firewalls Network Management Command Reference-6PW101

227
O
p
tion Descri
p
tion
customer-dot1p 8021p-list
Matches the 802.1p priority of the customer network.
The 8021p-list argument is a list of up to eight 802.1p priority
values. An 802.1p priority ranges from 0 to 7.
ip-precedence ip-precedence-list
Matches IP precedence.
The ip-precedence-list argument is a list of up to eight IP
precedence values. An IP precedence ranges from 0 to 7.
qos-local-id local-id-value Matches a local QoS ID, which ranges from 1 to 4095.
source-mac mac-address Matches a source MAC address.
Description
Use if-match to define a match criterion.
Use undo if-match to delete a match criterion.
When defining match criteria, use the usage guidelines described in these subsections:
• Defining an ACL-based match criterion
• Defining a criterion to match a destination MAC address
• Defining a criterion to match a source MAC address
• Defining a criterion to match DSCP values
• Defining a criterion to match 802.1p priority values of the customer network
• Defining a criterion to match IP precedence values
Defining an ACL-based match criterion
If the ACL referenced in the if-match command does not exist, the class cannot be applied to hardware.
For a class, you can reference an ACL twice by its name and number respectively with the if-match
command.
Defining a criterion to match a destination MAC address
You can configure multiple destination MAC address match criteria for a class.
A destination MAC address match criterion is significant only to Ethernet interfaces.
Defining a criterion to match a source MAC address
You can configure multiple source MAC address match criteria for a class.
A criterion to match a source MAC address is significant only to Ethernet interfaces.
Defining a criterion to match DSCP values
• You can configure multiple DSCP match criteria for a class. All defined DSCP values are
automatically sorted in ascending order.
• You can configure up to eight DSCP values in one command line. If multiple identical DSCP values
are specified, the system considers them as one. If a packet matches one of the defined DSCP values,
it matches the if-match clause.
• To delete a criterion that matches DSCP values, the specified DSCP values must be identical with
those defined in the rule (the sequence may be different).