R211x-HP Flexfabric 11900 ACL and QoS Command Reference

37
O
p
tion Descri
p
tion
service-vlan-id vlan-id-list
Matches the service provider VLAN IDs (SVLANs).
The vlan-id-list argument is in the format of vlan-id-list = { vlan-id | vlan-id1 to
vlan-id2 }&<1-10>, where the vlan-id, vlan-id1, and vlan-id2 arguments
represent the VLAN IDs and each range from 1 to 4094, vlan-id1 must be no
greater than vlan-id2, and &<1-10> indicates that you can specify up to 10
VLAN IDs or VLAN ID ranges.
source-mac mac-address Matches a source MAC address.
Usage guidelines
When an ACL is referenced by a QoS policy for traffic classification, the action (permit or deny) in the
ACL is ignored, and the actions in the associated traffic behavior are performed.
If a class that uses the AND operator has multiple if-match acl, if-match acl ipv6, if-match
customer-vlan-id or if-match service-vlan-id clauses, a packet that matches any of the clauses matches
the class.
To successfully execute the traffic behavior associated with a traffic class that uses the AND operator,
define only one if-match clause for any of the following match criteria, and enter only one value for any
of the following list arguments (for example, the 8021p-list argument):
• customer-dot1p 8021p-list
• destination-mac mac-address
• dscp dscp-list
• ip-precedence ip-precedence-list
• service-dot1p 8021p-list
• source-mac mac-address
• control-plane protocol protocol-name
To create multiple if-match clauses for these match criteria or specify multiple values for the list arguments,
specify the operator of the class as OR and use the if-match command multiple times.
If a match criterion includes the if-match control-plane protocol or if-match control-plane protocol-group
clause, the QoS policy that references this match criterion can only be applied to the control plane.
Defining an ACL-based match criterion
• If the ACL referenced in the if-match command does not exist, the relevant QoS policy cannot be
applied normally.
• You can configure multiple ACLs for a class.
• For a traffic class, you can reference an ACL twice by its name and number with the if-match
command, respectively.
Defining a criterion to match a destination MAC address
You can configure multiple destination MAC address match criteria for a traffic class.
Defining a criterion to match a source MAC address
You can configure multiple source MAC address match criteria for a traffic class.