if-match source-mac

Function

The if-match source-mac command configures a matching rule based on the source MAC address in a traffic classifier.

The undo if-match source-mac command deletes a matching rule based on the source MAC address in a traffic classifier.

By default, a matching rule based on the source MAC address is not configured in a traffic classifier.

Format

if-match source-mac mac-address [ mac-address-mask ]

undo if-match source-mac

Parameters

Parameter	Description	Value
mac-address	Specifies the source MAC address.	The value is in H-H-H format. An H is a hexadecimal number of 1 to 4 digits.
mac-address-mask	Specifies the mask of the source MAC address. Similar to the mask of the IP address, the mask of the MAC address determines a group of MAC addresses. The device can accurately match certain bits in the source MAC address using the mask of the MAC address. In practice, you can set these bits to F in the mask of the source MAC address.	The value is in H-H-H format. An H is a hexadecimal number of 1 to 4 digits. The value cannot be 0-0-0.

Parameter

Description

Value

mac-address

Specifies the source MAC address.

The value is in H-H-H format. An H is a hexadecimal number of 1 to 4 digits.

mac-address-mask

Specifies the mask of the source MAC address.

Similar to the mask of the IP address, the mask of the MAC address determines a group of MAC addresses. The device can accurately match certain bits in the source MAC address using the mask of the MAC address. In practice, you can set these bits to F in the mask of the source MAC address.

The value is in H-H-H format. An H is a hexadecimal number of 1 to 4 digits. The value cannot be 0-0-0.

Views

Traffic classifier view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run the if-match source-mac command to classify packets based on the source MAC address so that the device processes packets matching the same traffic classifier in the same manner.

Prerequisites

A traffic classifier has been created using the traffic classifier command in the system view.

Precautions

If you run the if-match source-mac command in the same traffic classifier view multiple times, only the latest configuration takes effect.

On the S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735-S-I, and S5735S-S, if a traffic policy is applied to the outbound direction and the relationship between rules in a traffic classifier is AND:

Rules for matching the source IPv6 address and those for matching destination IPv6 address cannot be configured in the same traffic classifier.
Rules for matching IPv6 information (for example, if-match protocol ipv6 and if-match ipv6 acl) and those for matching the source MAC address, destination MAC address, source IPv6 address, or destination IPv6 address of packets cannot be configured in the same traffic classifier. (ACL6 rules can be used to match the source or destination IPv6 address of packets.)
Rules for matching IPv4 information (IP address and UDP port number) and those for matching some Layer 2 information (for example, if-match source-mac, if-match destination-mac, and if-match l2-protocol { mpls | rarp | protocol-value }) cannot be configured in the same traffic classifier.

Example

# Configure a matching rule based on the source MAC address of 0050-ba27-bed2 in the traffic classifier c1.

<HUAWEI> system-view
[HUAWEI] traffic classifier c1 operator and
[HUAWEI-classifier-c1] if-match source-mac 0050-ba27-bed2

# Configure a matching rule based on the source MAC address of XX50-bXX7-bed3 in the traffic classifier c1.

<HUAWEI> system-view
[HUAWEI] traffic classifier c1 operator and
[HUAWEI-classifier-c1] if-match source-mac 0050-ba27-bed3 00ff-f00f-ffff