R21xx-HP FlexFabric 11900 ACL and QoS Command Reference

17
inbound: Specifies the inbound direction.
outbound: Specifies the outbound direction.
acl-number: Specifies an ACL by its number:
• 2000 to 2999 for IPv4 basic ACLs if the ipv6 keyword is not specified and for IPv6 basic ACLs if
the ipv6 keyword is specified.
• 3000 to 3999 for IPv4 advanced ACLs s if the ipv6 keyword is not specified and for IPv6 advanced
ACLs if the ipv6 keyword is specified.
• 4000 to 4999 for Ethernet frame header ACLs. This entry is not displayed if the ipv6 keyword is
specified.
name acl-name: Specifies an ACL by its name. The acl-name argument takes a case-insensitive string of
1 to 63 characters. It must start with an English letter. For a basic ACL or advanced ACL, if you do not
specify the ipv6 keyword, this option specifies the name of an IPv4 basic ACL or advanced ACL. If you
specify the ipv6 keyword, this option specifies the name of an IPv6 basic ACL or advanced ACL.
Usage guidelines
When none of default, acl-number, and name acl-name is specified, this command clears the match
statistics of all ACLs for packet filtering.
• If the ipv6 keyword is not specified, all ACLs refer to all IPv4 basic, IPv4 advanced, and Ethernet
frame header ACLs.
• If the ipv6 keyword is specified, all ACLs refer to all IPv6 basic and IPv6 advanced ACLs.
Examples
# Clear IPv4 basic ACL 2001 statistics for incoming packet filtering on interface GigabitEthernet 1/0/1.
<Sysname> reset packet-filter statistics vlan 2 inbound 2001
Related commands
• display packet-filter statistics
• display packet-filter statistics sum
rule (Ethernet frame header ACL view)
Use rule to create or edit an Ethernet frame header ACL rule.
Use undo rule to delete an Ethernet frame header ACL rule or some attributes in the rule.
Syntax
rule [ rule-id ] { deny | permit } [ cos vlan-pri | counting | dest-mac dest-address dest-mask | { lsap
lsap-type lsap-type-mask | type protocol-type protocol-type-mask } | source-mac source-address
source-mask | time-range time-range-name ] *
undo rule rule-id [ counting | time-range ] *
Default
An Ethernet frame header ACL does not contain any rule.
Views
Ethernet frame header ACL view
Predefined user roles
network-admin