No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade
Knowledge Base

FAQ-What Is the Difference on the Configuration and Application of ACL Based on MAC Addresses of Middle and Low-End Routers of VRP 1.74 and VRP 3.40

Publication Date:  2012-07-27  |   Views:  112  |   Downloads:  0  |   Author:  Li Cheng  |   Document ID:  EKB0000301613

Contents

Issue Description

Q:
What is the difference on the configuration and application of ACL based on MAC addresses of middle and low-end routers of VRP 1.74 and VRP 3.40?
      

Alarm Information

Null

Handling Process

A:
For VRP 1.74, ACL rules based on MAC addresses can be from 4000 to 4099 and the wildcard mask is used. That is, the mask with all zeros corresponds to a single address. You can run the mac-filter command to filter packets sent by the lower-layer network to the route.
For VRP3.40, ACL rules based on MAC addresses can be from 4000 to 4099 and normal mask is used. That is, the mask with all Fs corresponds to a single MAC address. It is valid for the bridging interface only. You can run the firewall ethernet-frame-filter command on the interface.
      

Root Cause

Null
      

Suggestions

Null