H3C S7500 Series Ethernet Switches Release 3135 DHCP Configuration Examples

QACL Configuration Examples
H3C S7500 Series Ethernet Switches Release 3135 Chapter 2 QACL Configuration Examples
2-13
# Configure GigabitEthernet 2/0/1 as a hybrid port and configure VLAN 200 as its
default VLAN. Configure GigabitEthernet 2/0/1 to forward packets of VLAN 200 with the
outer VLAN tag removed.
<H3C> system-view
[H3C] interface GigabitEthernet 2/0/1
[H3C-GigabitEthernet2/0/1] port link-type hybrid
[H3C-GigabitEthernet2/0/1] port hybrid pvid vlan 200
[H3C-GigabitEthernet2/0/1] port hybrid vlan 200 untagged
# Enable QinQ on GigabitEthernet 2/0/1.
[H3C-GigabitEthernet2/0/1] vlan-vpn enable
2.3 Precautions
Pay attention to the following when making configuration:
1) Advanced ACLs 3998 and 3999 are reserved for cluster management and
therefore are not user-configurable.
2) You can use the acl order command to specify the match order for the ACL rules
applied to the hardware. The S7500 series support three match orders: depth-first,
first-config-first-match, and last-config-first-match.
3) On a type-A LPU, basic ACL rules with the fragment keyword and advanced ACL
rules with the tos or fragment keyword cannot be applied to hardware.
4) On a non-type-A LPU, advanced ACL rules with the range keyword for TCP/UDP
ports cannot be applied to hardware.
5)
Table 2-1 lists the offset values of some common protocols you can define in
user-defined ACLs for packet matching on a non-type-A LPU.
Table 2-1 Offset values of common protocols
Protocol type
Protocol
number
Offset value for ports
with QinQ disabled
Offset value for ports
with QinQ enabled
ARP 0x0806 16 20
RARP 0x8035 16 20
IP 0x0800 16 20
IPX 0x8137 16 20
AppleTalk 0x809B 16 20
ICMP 0x01 27 31
IGMP 0x02 27 31
TCP 0x06 27 31
UDP 0x17 27 31