Configuring an acl, Recommended acl configuration procedures, Recommended ipv4 basic acl configuration procedure – H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 665

Advertising
background image

644

When you configure queuing for a traffic behavior:

In a policy, the total bandwidth assigned to the AF and EF classes cannot be greater than the
available bandwidth of the interface to which the policy applies. The total bandwidth
percentage assigned to the AF and EF classes cannot be greater than 100%.

In the same policy, the same bandwidth unit must be used to configure bandwidth for AF classes
and EF classes, either absolute bandwidth value or percent.

Configuring an ACL

Recommended ACL configuration procedures

Recommended IPv4 basic ACL configuration procedure

IPv4 basic ACLs match packets based only on source IP addresses.
To configure an IPv4 basic ACL:

Step

Remarks

1. Adding a time range

Optional.
A rule referencing a time range takes effect only
during the specified time range.

2.

Add an IPv4 basic ACL

Required.
For more information, see "

Adding an ACL

."

3. Configuring a rule for an IPv4 basic ACL

Required.

Recommended IPv4 advanced ACL configuration procedure

IPv4 advanced ACLs match packets based on source IP addresses, destination IP addresses, packet

priorities, protocols over IP, and other protocol header information, such as TCP/UDP source and
destination port numbers, TCP flags, ICMP message types, and ICMP message codes.
IPv4 advanced ACLs allow more flexible and accurate filtering than IPv4 basic ACLs.
To configure an IPv4 advanced ACL:

Step

Remarks

1. Adding a time range

Optional.
A rule referencing a time range takes effect only

during the specified time range.

2.

Add an IPv4 advanced ACL

Required.
For more information, see "

Adding an ACL

."

3. Configuring a rule for an IPv4 advanced ACL

Required.

Recommended Ethernet frame header ACL configuration procedure

Ethernet frame header ACLs, also called "Layer 2 ACLs," match packets based on Layer 2 protocol

header fields, such as source MAC address, destination MAC address, 802.1p priority (VLAN priority),

and link layer protocol type.

Advertising