Kontron AT8404 CLI - Manual (Page 202)

Quality of Service (QoS) Commands AT8404
AT8404 CLI Reference Manual Page 3 - 28
A rule may either deny or permit traffic according to the specified classification fields. At a minimum, the source and
destination MAC value must be specified, each of which may be substituted using the keyword any to indicate a
match on any value in that field. The remaining command parameters are all optional, but the most frequently used
parameters appear in the same relative order as shown in the command format.
The Ethertype may be specified as either a keyword or a four-digit hexadecimal value from 0x0600-0xFFFF. The
currently supported values are: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast,
netbios, novell, pppoe, rarp. Each of these translates into its equivalent Ethertype value(s).
The vlan and cos parameters refer to the VLAN identifier and 802.1p user priority fields, respectively, of the VLAN
tag. For packets containing a double VLAN tag, this is the first (or outer) tag.
The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches
this rule. The allowed value is 0-(n-1), where n is the number of user configurable queues available
for the hardware platform. The assign-queue parameter is valid only for a permit rule.
For the Broadcom 5650x platform, the mirror parameter allows the traffic matching this rule to be copied to the
specified , while the redirect parameter allows the traffic matching this rule to be forwarded to the
specified . The assign-queue and redirect parameters are only valid for a permit rule.
Table 1: Ethertype Keyword and 4-digit Hexadecimal Value
Ethertype Keyword Corresponding Value
appletalk 0x809B
arp 0x0806
ibmsna 0x80D5
ipv4 0x0800
ipv6 0x86DD
ipx 0x8037
mplsmcast 0x8848
mplsucast 0x8847
netbios 0x8191
novell 0x8137, 0x8138
pppoe 0x8863, 0x8864
rarp 0x8035
Note: The mirror and redirect parameters are not available on the Broadcom 5630x platform.
Note: The special command form {deny | permit} any any is used to match all Ethernet layer 2
packets, and is the equivalent of the IP access list “match every” rule.
Format {deny|permit} { | any} { | any} [ |
<0x0600-0xFFFF>] [vlan {eq <0-4095>}] [cos <0-7>] [[log] [assign-queue
]] [{mirror | redirect} ]
Mode Mac-Access-List Config