exceed-action drop classify table mask l3 ip4 src proto classify session policer-hit-next policy1 exceed-color table-index ACL 拒绝配置 classify table mask l3 ip4 src proto classify session acl-hit-next deny table-index 1 match
0000000000000000000000000000FF0000000000000000FF #匹配规则:ipv4及tcp报文 classify session acl-hit-next permit table-index 000000000000000000000000000045000000000000000006 #匹配规则:ipv4及icmp报文 classify session acl-hit-next permit table-index 000000000000000000000000000045000000000000000001 ##匹配规则:ipv4及icmp报文 classify session acl-hit-next permit table-index
table-index:3,这里是第一步创建规则表后返回的表索引。 learning_vpp2# classify session acl-hit-next deny table-index 3 match l3 ip4 src 192.168.100.2 learning_vpp2