配置基于ACL的重标记

操作步骤

• 在全局或VLAN上配置重标记
  1. 执行命令system-view，进入系统视图。
  2. 请根据实际需要选择进行如下配置：

     • 执行命令traffic-remark [ vlan vlan-id ] inbound acl { [ ipv6 ] { bas-acl | adv-acl | name acl-name } | l2-acl | user-acl } [ rule rule-id ] { 8021p 8021p-value | destination-mac mac-address | dscp { dscp-name | dscp-value } | local-precedence local-precedence-value | vlan-id vlan-id }，对匹配单个ACL规则的入方向的报文进行重标记。

     • 执行命令traffic-remark [ vlan vlan-id ] outbound acl { [ ipv6 ] { bas-acl | adv-acl | name acl-name } | l2-acl } [ rule rule-id ] { 8021p 8021p-value | cvlan-id cvlan-id | dscp { dscp-name | dscp-value } | vlan-id vlan-id }，对匹配单个ACL规则的出方向的报文进行重标记。

     • 执行命令traffic-remark [ vlan vlan-id ] inbound acl l2-acl [ rule rule-id ] acl { bas-acl | adv-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | destination-mac mac-address | dscp { dscp-name | dscp-value } | local-precedence local-precedence-value | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的入方向的报文进行重标记。

     • 执行命令traffic-remark [ vlan vlan-id ] inbound acl { bas-acl | adv-acl } [ rule rule-id ] acl { l2-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | destination-mac mac-address | dscp { dscp-name | dscp-value } | local-precedence local-precedence-value | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的入方向的报文进行重标记。

     • 执行命令traffic-remark [ vlan vlan-id ] inbound acl name acl-name [ rule rule-id ] acl { bas-acl | adv-acl | l2-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | destination-mac mac-address | dscp { dscp-name | dscp-value } | local-precedence local-precedence-value | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的入方向的报文进行重标记。

     • 执行命令traffic-remark [ vlan vlan-id ] outbound acl l2-acl [ rule rule-id ] acl { bas-acl | adv-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | cvlan-id cvlan-id | dscp { dscp-name | dscp-value } | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的出方向的报文进行重标记。

     • 执行命令traffic-remark [ vlan vlan-id ] outbound acl { bas-acl | adv-acl } [ rule rule-id ] acl { l2-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | cvlan-id cvlan-id | dscp { dscp-name | dscp-value } | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的出方向的报文进行重标记。

     • 执行命令traffic-remark [ vlan vlan-id ] outbound acl name acl-name [ rule rule-id ] acl { bas-acl | adv-acl | l2-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | cvlan-id cvlan-id | dscp { dscp-name | dscp-value } | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的出方向的报文进行重标记。

     X系列单板不支持destination-mac mac-address。

• 在接口上配置重标记
  1. 执行命令system-view，进入系统视图。
  2. 执行命令interface interface-type interface-number，进入接口视图。
  3. 请根据实际需要选择进行如下配置：

     • 执行命令traffic-remark inbound acl { [ ipv6 ] { bas-acl | adv-acl | name acl-name } | l2-acl | user-acl } [ rule rule-id ] { 8021p 8021p-value | destination-mac mac-address | dscp { dscp-name | dscp-value } | local-precedence local-precedence-value | vlan-id vlan-id }，对匹配单个ACL规则的入方向的报文进行重标记。

     • 执行命令traffic-remark outbound acl { [ ipv6 ] { bas-acl | adv-acl | name acl-name } | l2-acl } [ rule rule-id ] { 8021p 8021p-value | cvlan-id cvlan-id | dscp { dscp-name | dscp-value } | vlan-id vlan-id }，对匹配单个ACL规则的出方向的报文进行重标记。

     • 执行命令traffic-remark inbound acl l2-acl [ rule rule-id ] acl { bas-acl | adv-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | destination-mac mac-address | dscp { dscp-name | dscp-value } | local-precedence local-precedence-value | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的入方向的报文进行重标记。

     • 执行命令traffic-remark inbound acl { bas-acl | adv-acl } [ rule rule-id ] acl { l2-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | destination-mac mac-address | dscp { dscp-name | dscp-value } | local-precedence local-precedence-value | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的入方向的报文进行重标记。

     • 执行命令traffic-remark inbound acl name acl-name [ rule rule-id ] acl { bas-acl | adv-acl | l2-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | destination-mac mac-address | dscp { dscp-name | dscp-value } | local-precedence local-precedence-value | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的入方向的报文进行重标记。

     • 执行命令traffic-remark outbound acl l2-acl [ rule rule-id ] acl { bas-acl | adv-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | cvlan-id cvlan-id | dscp { dscp-name | dscp-value } | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的出方向的报文进行重标记。

     • 执行命令traffic-remark outbound acl { bas-acl | adv-acl } [ rule rule-id ] acl { l2-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | cvlan-id cvlan-id | dscp { dscp-name | dscp-value } | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的出方向的报文进行重标记。

     • 执行命令traffic-remark outbound acl name acl-name [ rule rule-id ] acl { bas-acl | adv-acl | l2-acl | name acl-name } [ rule rule-id ] { 8021p 8021p-value | cvlan-id cvlan-id | dscp { dscp-name | dscp-value } | vlan-id vlan-id }，对同时匹配二层ACL和三层ACL规则的出方向的报文进行重标记。

     X系列单板不支持destination-mac mac-address。