4000 Router Series ACL and QoS Command Reference

• If the ipv6 keyword is not specified, all ACLs refer to all IPv4 basic, IPv4 advanced, Ethernet frame

header, and user-defined ACLs.

• If the ipv6 keyword is specified, all ACLs refer to all IPv6 basic and IPv6 advanced ACLs.

Examples

# Clear IPv4 basic ACL 2001 statistics for incoming packet filtering in VLAN 2.

<Sysname> reset packet-filter statistics vlan 2 inbound 2001

Related commands

• display packet-filter statistics

• display packet-filter statistics sum

rule (Ethernet frame header ACL view)

Use rule to create or edit an Ethernet frame header ACL rule.

Use undo rule to delete an Ethernet frame header ACL rule or some attributes in the rule.

Syntax

rule [ rule-id ] { deny | permit } [ cos vlan-pri | counting | dest-mac dest-address dest-mask | { lsap

lsap-type lsap-type-mask | type protocol-type protocol-type-mask } | source-mac source-address

source-mask | time-range time-range-name ] *

undo rule rule-id [ counting | time-range ] *

Default

An Ethernet frame header ACL does not contain any rule.

Views

Ethernet frame header ACL view

Predefined user roles

network-admin

Parameters

rule-id: Specifies a rule ID in the range of 0 to 65534. If no rule ID is specified when you create an ACL

rule, the system automatically assigns it a rule ID. This rule ID is the nearest higher multiple of the

numbering step to the current highest rule ID, starting from 0. For example, if the rule numbering step is

5 and the current highest rule ID is 28, the rule is numbered 30.

deny: Denies matching packets.

permit: Allows matching packets to pass.

cos vlan-pri: Matches an 802.1p priority. The vlan-pri argument can be a number in the range of 0 to 7,

or in words, best-effort (0), background (1) , spare (2), excellent-effort (3), controlled-load (4), video (5),

voice (6), or network-management (7).

counting: Counts the number of times the Ethernet frame header ACL rule has been matched. The

counting keyword enables match counting specific to rules. If the counting keyword is not specified,

matches for the rule are not counted.

dest-mac dest-address dest-mask: Matches a destination MAC address range. The dest-address and

dest-mask arguments represent a destination MAC address and mask in the H-H-H format.