华为6506R交换机的手工ACL写法

作者:kevin 日期:2010-06-19

字体大小: 小中大

<6506>dis device
S6506  Salience III
Slot No.  Brd Type    Brd Status   Subslot Num    Sft Ver         Patch Ver
0         LS81SRPG    Normal       0              S6506-3135      None
1         NONE        Absent       Absent         None            None
2         LS81GT48    Normal       0              S6506-3135      None
3         NONE        Absent       Absent         None            None
4         NONE        Absent       Absent         None            None
5         LS81GP48    Normal       0              S6506-3135      None
6         NONE        Absent       Absent         None            None

<6506>dis version
Huawei Versatile Routing Platform Software
VRP software, Version 3.10, Release 3135
Copyright (c) 1998-2007 Huawei Technologies Co.,Ltd. All rights reserved.
Quidway S6506 uptime is 0 weeks, 2 days, 20 hours, 58 minutes

SRPG 0:  uptime is 0 weeks,2 days,20 hours,58 minutes
QuidwayS6500 with 1 MPC8245 Processor
256M    bytes SDRAM
32768K  bytes Flash Memory
512K    bytes NVRAM Memory
PCB Version      :   VER.C
BootROM Version  :   522
CPLD Version     :   004
Second CPLD Ver  :   005
Software Version :   S6506-3135
Patch Version    :   None

LPU 2:  uptime is 0 weeks,2 days,18 hours,37 minutes
QuidwayS6500 LPU with 1 MPC8241 Processor
128M    bytes SDRAM
0K      bytes Flash Memory
0K      bytes NVRAM Memory
PCB Version      :   VER.B
BootROM Version  :   531
CPLD Version     :   005
Software Version :   S6506-3135
Patch Version    :   None

LPU 5:  uptime is 0 weeks,2 days,18 hours,27 minutes
QuidwayS6500 LPU with 1 MPC8245 Processor
256M    bytes SDRAM
32768K  bytes Flash Memory
0K      bytes NVRAM Memory
PCB Version      :   VER.C
BootROM Version  :   532
CPLD Version     :   006
Second CPLD Ver  :   006
Software Version :   S6506-3135
Patch Version    :   None

以上为板本为设备信息.
在创建ACL时为5000-5999
包对应情况如下:
AA AA AA BB BB BB CC CC DD DD DD DD
EF HH II  II
JJ  JJ   KK KK
LL MM NN NN
OO OO OO OO
PP PP PP PP

A->目的MAC
B->源MAC
C->数据类型
D->VLAN
下面是IP包头
rule 0 deny 0100 ffff 22 11 ff 27 为拒绝ID为256的UDP包