H3C S6890 Series Installation manual

H3C S6890 Switch Series
OpenFlow Command Reference
New H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: Release 3606
Document version: 6W100-20201225

Copyright © 2020, New H3C Technologies Co., Ltd. and its licensors
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this
document are the property of their respective owners.
Notice
The information in this document is subject to change without notice. All contents in this document, including
statements, information, and recommendations, are believed to be accurate, but they are presented without
warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions
contained herein.

Preface
This command reference describes the OpenFlow configuration commands.
This preface includes the following topics about the documentation:
•
Audience.
•
Conventions.
•
Documentation feedback.
Audience
This documentation is intended for:
•
Network planners.
•
Field technical support and servicing engineers.
•
Network administrators working with the S6890 Switch Series.
Conventions
The following information describes the conventions used in the documentation.
Command conventions
Convention
Description
Boldface Bold text represents commands and keywords that you enter literally as shown.
Italic Italic text represents arguments that you replace with actual values.
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select a minimum of one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntaxchoices separated byvertical
bars, from which you select one choice, multiple choices, or none.
&<1-n> The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
# A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface Window names, button names, field names, and menu items are in Boldface. For
example, the New User window opens; click OK.
> Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.

Symbols
Convention
Description
WARNING! An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION:
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT:
An alert that calls attention to essential information.
NOTE:
An alert that contains additional or supplementary information.
TIP:
An alert that provides helpful information.
Network topology icons
Convention
Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Represents a wireless terminator unit.
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
T
T
T
T

Documentation feedback
You can e-mail your comments about product documentation to inf[email protected].
We appreciate your comments.

i
Contents
OpenFlow commands····················································································1
active instance ···········································································································································1
classification···············································································································································1
controller address·······································································································································2
controller auxiliary······································································································································3
controller connect interval··························································································································4
controller echo-request interval··················································································································5
controller mode ··········································································································································5
datapath-id·················································································································································6
default table-miss permit····························································································································7
description··················································································································································7
display openflow·········································································································································8
display openflow auxiliary ··························································································································9
display openflow flow-table······················································································································11
display openflow group ····························································································································16
display openflow instance························································································································17
display openflow meter ····························································································································19
display openflow summary·······················································································································21
fail-open mode ·········································································································································22
flow-entry max-limit··································································································································22
flow-table··················································································································································23
forbidden port···········································································································································24
listening port·············································································································································24
mac-ip dynamic-mac aware·····················································································································25
mac-learning forbidden ····························································································································26
openflow instance ····································································································································26
permit-port-type member-port··················································································································27
precedence dynamic arp··························································································································27
protocol-packet filter slow·························································································································28
refresh ip-flow···········································································································································28
reset openflow instance statistics·············································································································29
tcp dscp····················································································································································29

1
OpenFlow commands
active instance
Use active instance to activate an OpenFlow instance.
Use undo active instance to deactivate an OpenFlow instance.
Syntax
active instance
undo active instance
Default
An OpenFlow instance is not activated.
Views
OpenFlow instance view
Predefined user roles
network-admin
Usage guidelines
After an OpenFlow instance is created or modified, use this command to activate or reactivate the
instance to make the instance take effect. After an OpenFlow instance is reactivated, it disconnects
from all controllers, clears the deployed flow tables, updates the capability set, and then reconnects
to controllers.
Examples
# Activate OpenFlow instance 1.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] active instance
classification
Use classification to configure the OpenFlow instance mode.
Use undo classification to restore the default.
Syntax
classification {global |vlan vlan-id [mask vlan-mask ][loosen ]}
undo classification
Default
The OpenFlow instance mode is not configured.
Views
OpenFlow instance view
Predefined user roles
network-admin

2
Parameters
global: Specifies the global mode.
vlan: Specifies the VLAN mode.
vlan-id: Specifies a VLAN ID in the range of 1 to 4094.
vlan-mask: Specifies a VLAN mask in the range of 0 to 4095. The default value is 4095.
loosen: Specifies the loosen mode. If the loosen mode is used, a port belongs to the OpenFlow
instance when VLANs associated with the OpenFlow instance overlap with the port's allowed VLANs.
If you do not specify the loosen mode, a port belongs to an OpenFlow instance only when VLANs
associated with the OpenFlow instance are within the port's allowed VLAN list.
Usage guidelines
The VLANs to be associated are calculated by a bitwise AND operation on the specified VLAN ID
and mask. The VLAN mask supports non-contiguous 1s and ignores all 0 bits. To view the
associated VLANs, use the display openflow instance command.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Enable the global mode for OpenFlow instance 1.
<Sysname> system-view
[Sysname]openflow instance 1
[Sysname-of-inst-1]classification global
# Enable the VLAN mode for OpenFlow instance 1 and associate OpenFlow instance 1 with VLANs
determined by VLAN ID 255 and VLAN mask 7.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] classification vlan 255 mask 7
Related commands
display openflow instance
controller address
Use controller address to specify a controller for an OpenFlow switch and configure the main
connection to the controller.
Use undo controller address to delete the main connection to the specified controller.
Syntax
controller controller-id address {ip ipv4-address |ipv6 ipv6-address }
[port port-number ][local address {ip local-ipv4-address |ipv6
local-ipv6-address }[port local-port-number ]][ssl ssl-policy-name ]
[vrf vrf-name ]
undo controller controller-id address
Default
An OpenFlow instance does not have a main connection to a controller.
Views
OpenFlow instance view

3
Predefined user roles
network-admin
Parameters
controller-id: Specifies a controller by its ID in the range of 0 to 63.
ip ipv4-address: Specifies the IPv4 address of the controller.
ipv6 ipv6-address: Specifies the IPv6 address of the controller.
port port-number: Sets the port number used by the controller to establish TCP connections to
the OpenFlow switch. The value range for the port number is 1 to 65535. The default value is 6633.
local address: Specifies the source IP address used to establish TCP connections to the
controller. When multiple routes are available between a controller and a switch, you can use this
keyword to configure a source IP address for the switch. When the switch restarts or an
active/standby switchover occurs, the switch can use the original route to reconnect to the controller
without selecting a new route.
ip local-ipv4-address: Specifies the source IPv4 address.
ipv6 local-ipv6-address: Specifies the source IPv6 address.
port local-port-number: Specifies the source port number in the range of 1 to 65535. If you
do not specify this option, the system automatically assigns a source port number for establishing the
main connection to the controller.
ssl ssl-policy-name: Specifies the SSLclient policy that the controller uses to authenticate the
OpenFlow switch. The ssl-policy-name argument is a case-insensitive string of 1 to 31
characters. You must configure a separate SSL client policy for the main connection to each
controller.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31
characters. If you do not specify a VRF name, the controller is in the public network.
Usage guidelines
You can specify multiple controllers for an OpenFlow switch. The OpenFlow channel between the
OpenFlow switch and each controller can have only one main connection.
The main connection must be a reliable TCP or SSL connection. The OpenFlow switch uses the
main connection to a controller to exchange control messages with the controller to perform the
following operations:
•
Receive flow table entries or data from the controller.
•
Report information to the controller.
Examples
# Specify controller 1 for OpenFlow instance 1. The controller's IP address is 1.1.1.1 and the port
number is 6666.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] controller 1 address ip 1.1.1.1 port 6666
controller auxiliary
Use controller auxiliary to specify a controller for an OpenFlow switch and configure an
auxiliary connection to the controller.
Use undo controller auxiliary to delete the specified auxiliary connection to the specified
controller.

4
Syntax
controller controller-id auxiliary auxiliary-id transport {tcp |udp |ssl
ssl-policy-name }[address {ip ipv4-address |ipv6 ipv6-address }][port
port-number ]
undo controller id auxiliary auxiliary-id
Default
An OpenFlow instance does not have auxiliary connections to a controller.
Views
OpenFlow instance view
Predefined user roles
network-admin
Parameters
controller-id: Specifies a controller by its ID in the range of 0 to 63.
auxiliary auxiliary-id: Specifies an auxiliary connection ID in the range of 1 to 255.
transport: Specifies the transport layer protocol.
tcp: Specifies TCP connections.
udp: Specifies UDP connections.
ssl ssl-policy-name: Specifies the SSLclient policy that the controller uses to authenticate the
OpenFlow switch. The ssl-policy-name argument is a case-insensitive string of 1 to 31
characters.
ip ipv4-address: Specifies the IPv4 address of the controller.
ipv6 ipv6-address: Specifies the IPv6 address of the controller.
port port-number: Sets the port number used to establish TCP connections to the controller.
The value range for the port number is 1 to 65535. The default value is 6633.
Usage guidelines
Auxiliary connections are used to improve the communication performance between the controller
and OpenFlow switches.
For an auxiliary connection to be successfully established, make sure the configuration of the
auxiliary connection does not conflict with the configuration of the main connection.
An auxiliary connection can have a different destination IP address and port number than the main
connection. If no destination IPaddress and port number are specified, the auxiliary connection uses
the destination IP address and port number configured for the main connection.
Examples
# Specify controller 1 for OpenFlow instance 1 and configure auxiliary connection 1 to the controller.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] controller 10 auxiliary 1 transport tcp
controller connect interval
Use controller connect interval to set the reconnection interval.
Use undo controller connect interval to restore the default.

5
Syntax
controller connect interval interval
undo controller connect interval
Default
The reconnection interval is 60 seconds.
Views
OpenFlow instance view
Predefined user roles
network-admin
Parameters
interval: Specifies the reconnection interval in the range of 10 to 120 seconds.
Examples
# Set the reconnection interval to 10 seconds.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] controller connect interval 10
controller echo-request interval
Use controller echo-request interval to set the connection detection interval.
Use undo controller echo-request interval to restore the default.
Syntax
controller echo-request interval interval
undo controller echo-request interval
Default
The connection detection interval is 5 seconds.
Views
OpenFlow instance view
Predefined user roles
network-admin
Parameters
interval: Specifies the connection detection interval in the range of 1 to 10 seconds.
Examples
# Set the connection detection interval to 10 seconds for OpenFlow instance 1.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] controller echo-request interval 10
controller mode
Use controller mode to set the controller connection mode for an OpenFlow instance.

6
Use undo controller mode to restore the default.
Syntax
controller mode {multiple |single }
undo controller mode
Default
The controller connection mode is multiple.
Views
OpenFlow instance view
Predefined user roles
network-admin
Parameters
multiple: Specifies the multiple mode. In multiple mode, the OpenFlow instance simultaneously
connects to all controllers specified for the OpenFlow instance. When communication with any
controller fails, the OpenFlow instance attempts to reconnect to the controller after a reconnection
interval until a connection is successfully established.
single: Specifies the single mode. In single mode, the OpenFlow switch connects to only one
controller at a time. When communication with the current controller fails, the OpenFlow instance
attempts to reconnect to another controller until a connection is successfully established.
Examples
# Set all controllers of OpenFlow instance 1 to operate in single mode.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] controller mode single
datapath-id
Use datapath-id to set the datapath ID for an OpenFlow instance.
Use undo datapath-id to restore the default.
Syntax
datapath-id id
undo datapath-id
Default
The datapath ID of an OpenFlow instance contains the instance ID and the bridge MAC address of
the device. The lower 16 bits are the instance ID and the upper 48 bits are the bridge MAC address
of the device.
Views
OpenFlow instance view
Predefined user roles
network-admin
Parameters
id: Specifies the datapath ID for the OpenFlow instance, in the range of 1 to ffffffffffffffff in
hexadecimal format.

7
Usage guidelines
The datapath ID uniquely identifies an OpenFlow instance.
Examples
# Set the datapath ID to 123456 for OpenFlow instance 1.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] datapath-id 123456
default table-miss permit
Use default table-miss permit to configure the default action of table-miss flow entries to
forward packets to the normal pipeline.
Use undo default table-miss permit to restore the default.
Syntax
default table-miss permit
undo default table-miss permit
Default
The default action of a table-miss flow entry is to drop packets.
Views
OpenFlow instance view
Predefined user roles
network-admin
Examples
# Configure the default action of table-miss flow entries to forward packets to the normal pipeline.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] default table-miss permit
description
Use description to configure a description for an OpenFlow instance.
Use undo description to restore the default.
Syntax
description text
undo description
Default
An OpenFlow instance does not have a description.
Views
OpenFlow instance view
Predefined user roles
network-admin

8
Parameters
text: Specifies a description, a case-sensitive string of 1 to 255 characters.
Examples
# Configure the description as test-desc for OpenFlow instance 1.
<Sysname> system-view
[Sysname] openflow instance 1
[Sysname-of-inst-1] description test-desc
display openflow
Use display openflow to display controller information for an OpenFlow instance.
Syntax
display openflow instance instance-id {controller [controller-id ] |
listened }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
instance-id: Specifies an OpenFlow instance by its ID in the range of 1 to 4094.
controller-id: Specifies a controller by its ID in the range of 0 to 63. If you do not specify a
controller ID, this command displays information about all controllers for an OpenFlow instance.
listened: Specifies the client that connects to the server that is enabled for the OpenFlow
instance.
Examples
# Display controller information for OpenFlow instance 100.
<Sysname> display openflow instance 100 controller
Instance 100 controller information:
Reconnect interval : 60 (s)
Echo interval : 5 (s)
Controller ID : 1
Controller IP address : 192.168.49.49
Controller port : 6633
Local IP address : 192.0.0.1
Local port : 5566
Controller role : Equal
Connect type : TCP
Connect state : Established
Packets sent : 9
Packets received : 9
SSL policy : --
VRF name : --

9
Table 1 Command output
Field Description
Reconnect interval Reconnection interval (in seconds) for an OpenFlow instance to reconnect to
all controllers.
Echo interval Connection detection interval (in seconds) at which an OpenFlow instance
sends an echo request message to all controllers.
Controller IP address IP address of the controller.
Controller port TCP port number of the controller.
Local IP address Source IP address of the controller that is connected to the OpenFlow
instance.
Local port Source TCP port number of the current controller.
Controller role
Role of the controller:
•Equal—The controller has the same mode as other controllers that are
specified for the OpenFlow instance.
•Master—The controller is the master controller for the OpenFlow
instance.
•Slave—The controller is a subordinate controller for the OpenFlow
instance.
If the controller is not configured with any role, this field displays two hyphens
(--).
Connect type Type of the connection between the OpenFlow instance and the controller:
TCP or SSL.
Connect state State of the connection between the OpenFlow instance and the controller:
Idle or Established.
Packets sent Number of packets that have been sent to the controller.
Packets received Number of packets that have been received from the controller.
SSL policy Name of the SSL client policy used for SSL connections.
If no SSL client policy is configured, this field displays two hyphens (--).
VRF name Name of the MPLS L3VPN to which the controller belongs.
If no MPLS L3VPN instance is configured, this field displays two hyphens (--).
display openflow auxiliary
Use display openflow auxiliary to display auxiliary connection information for an OpenFlow
instance.
Syntax
display openflow instance instance-id auxiliary [controller-id
[auxiliary auxiliary-id ] ]
Views
Any view
Predefined user roles
network-admin
network-operator

10
Parameters
instance-id: Specifies an OpenFlow instance by its ID in the range of 1 to 4094.
controller-id: Specifies a controller by its ID in the range of 0 to 63.
auxiliary auxiliary-id: Specifies an auxiliary connection by its ID in the range of 1 to 255.
Examples
# Display auxiliary connection information for OpenFlow instance 100.
<Sysname> display openflow instance 100 auxiliary
Controller ID: 1 Auxiliary connection number: 2
Auxiliary connection ID : 1
Controller IP address : 192.168.49.48
Controller port : 6633
Connect type : TCP
Connect state : Established
Packets sent : 9
Packets received : 9
SSL policy : --
Auxiliary connection ID : 2
Controller IP address : 192.168.49.49
Controller port : 6633
Connect type : TCP
Connect state : Established
Packets sent : 9
Packets received : 9
SSL policy : --
Table 2 Command output
Field Description
Auxiliary connection
number Total number of auxiliary connections.
Auxiliary connection ID ID of an auxiliary connection.
Controller IP address IP address of the controller.
Controller port TCP port number of the controller.
Connect type Type of the connection between the OpenFlow instance and the controller:
TCP UDP, or SSL.
Connect state State of the connection between the OpenFlow instance and the controller:
Idle or Established.
Packets sent Number of packets that have been sent to the controller.
Packets received Number of packets that have been received from the controller.
SSL policy Name of the SSL client policy used for SSL connections.
If no SSL client policy is configured, this field displays two hyphens (--).

11
display openflow flow-table
Use display openflow flow-table to display flow table information for an OpenFlow
instance.
Syntax
display openflow instance instance-id flow-table [table-id ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
instance-id: Specifies an OpenFlow instance by its ID in the range of 1 to 4094.
table-id: Specifies a flow table by its ID in the range of 0 to 254. If you do not specify a flow table
ID, the command displays information about all flow tables for the specified OpenFlow instance.
Examples
# Display information about all flow tables for OpenFlow instance 100.
<Sysname> display openflow instance 100 flow-table
Instance 100 flow table information:
Table 0 information:
Table type: MAC-IP, flow entry count: 1, total flow entry count: 2
MissRule (default) Flow entry information:
cookie: 0x0, priority: 0, hard time: 0, idle time: 0, flags: reset_counts
|no_pkt_counts|no_byte_counts, byte count: --, packet count: --
Match information: any
Instruction information:
Write actions:
Drop
Flow entry 1 information: (Not effective)
cookie: 0x0, priority: 1, hard time: 0, idle time: 0, flags: none,
byte count: --, packet count: --
Controller ID: 15
Match information:
Ethernet destination MAC address: 0000-0000-0001
Ethernet destination MAC address mask: ffff-ffff-ffff
VLAN ID: 100, mask: 0xfff
Instruction information:
Write actions:
Output interface: XGE1/0/4
Write metadata/mask: 0x0000000000000001/0xffffffffffffffff
Goto table: 1

12
Table 1 information:
Table type: Extensibility, flow entry count: 2, total flow entry count: 2
MissRule (default) Flow entry information:
cookie: 0x0, priority: 0, hard time: 0, idle time: 0, flags: none,
byte count: --, packet count: 60
Match information: any
Instruction information:
Write actions:
Drop
Flow entry 1 information:
cookie: 0x0, priority: 0, hard time: 0, idle time: 0, flags: flow_send_rem
|check_overlap, byte count: --, packet count: 1
Controller ID: 13
Match information:
Input interface: XGE1/0/3
Ethernet source MAC address: 0000-0000-0001
Ethernet source MAC address mask: ffff-ffff-ffff
Instruction information:
Set meter: 100
Apply actions:
Output interface: XGE1/0/4
Write actions:
Output interface: Controller, send length: 128 bytes
Table 3 Command output
Field Description
Table information Information about the flow table.
Table type Type of the flow table:
MAC-IP
or
Extensibility
.
flow entry count Number of flow entries deployed by the controller.
total flow entry count Total number of flow entries in the table.
Flow entry information Information about the flow entry. If the flow entry does not take effect, this field
displays Not effective.
cookie Cookie ID of the flow entry.
priority Priority of the flow entry. The larger the value, the higher the priority.
hard time Hard timeout of the flow entry, in seconds. The flow entryis removed when the
timer times out, whether or not the flow entry matches any data stream.
If the flow entry has no hard timeout, the field displays 0.
idle time Idle timeout of the flow entry, in seconds. The flow entry is removed if the flow
entry does not match any data stream during the idle time.
If the flow entry has no idle timeout, the field displays 0.
flags
Flags that the flow entry includes:
•flow_send_rem—Sends a flow removed message when the flow entryis
removed or expires.
•check_overlap—Checks for overlapping flow entries.
•reset_counts—Resets flow table counters.

13
Field Description
•no_pkt_counts—Does not count packets.
•no_byte_counts—Does not count bytes.
If the flow entry does not include any flags, this field displays none.
byte count Number of bytes that have matched the flow entry.
packet count Number of packets that have matched the flow entry.
Match information Contents of the match field of the flow entry (see Table 4).
Controller ID ID of the controller that deploys the flowentry. This field is displayed only when
the OpenFlow user plane forwarding feature is enabled.
Instruction information
Contents of the instruction set of the flow entry:
•Set meter—Sends the matched packet to a specific meter.
•Write metadata—Writes the value into the metadata fields of the
matched packet. Metadata is used for passing messages between flow
tables.
•Write metadata mask—Specifies which bits of the metadata should be
modified.
•Goto table—Sends the matched packet to the next flow table for
processing.
•Clear actions—Immediately clears all actions in the action set.
•Apply actions—Immediately applies specified actions in the action set.
•Write actions—Writes specified actions into the current action set.
For more information about actions, see Table 5.
Table 4 Match field types
Field Mask field Description
Input interface N/A Ingress port (see Table 6).
Physical input interface N/A Ingress physical port.
Metadata Metadata mask Metadata and mask.
Ethernet destination
MAC address Ethernet destination MAC address mask Ethernet destination MAC address and mask.
Ethernet source MAC
address Ethernet source MAC address mask Ethernet source MAC address and mask.
Ethernet type N/A Ethernet type of the OpenFlow packet payload.
VLAN ID Mask VLAN ID and mask.
VLAN PCP N/A VLAN priority.
IP DSCP N/A Differentiated Services Code Point (DSCP)
value.
IP ECN N/A Explicit Congestion Notification (ECN) value in
the IP header.
IP protocol N/A IPv4 or IPv6 protocol number.
IPv4 source address Mask IPv4 source address and mask.
IPv4 destination address Mask IPv4 destination address and mask.
TCP source port Mask TCP source port and mask.
TCP destination port Mask TCP destination port and mask.

14
Field Mask field Description
UDP source port Mask UDP source port and mask.
UDP destination port Mask UDP destination port and mask.
SCTP source port Mask Stream Control Transmission Protocol (SCTP)
source port and mask.
SCTP destination port Mask SCTP destination port and mask.
ICMPv4 type N/A ICMPv4 type.
ICMPv4 code N/A ICMPv4 code.
ARP opcode N/A ARP opcode.
ARP source IPv4
address Mask Sender IPv4 address and mask in the ARP
payload.
ARP target IPv4 address Mask Target IPv4 address and mask in the ARP
payload.
ARP source MAC
address ARP source MAC address mask Sender MAC address and mask in the ARP payload.
ARP target MAC
address ARP target MAC address mask Target MAC address and mask in the ARP payload.
IPv6 source address IPv6 source address mask Source IPv6 address and mask.
IPv6 destination address IPv6 destination address
mask Destination IPv6 address and mask.
IPv6 flow label Mask IPv6 flow label and mask.
ICMPv6 type N/A ICMPv6 type.
ICMPv6 code N/A ICMPv6 code.
IPv6 ND target address N/A Target IP address in an IPv6 Neighbor
Discovery message.
IPv6 ND source MAC
address N/A Source link-layer address in an IPv6 Neighbor Discovery message.
IPv6 ND target MAC
address N/A Target link-layer address in an IPv6 Neighbor Discovery message.
MPLS label N/A Label in the first MPLS header.
MPLS tc N/A Traffic Class (TC) in the first MPLS header.
Tunnel ID Mask Metadata and mask that are associated with a
logical port.
IPv6 extension header Mask IPv6 extension header and mask.
Output interface N/A Output port.
VRF index N/A VPN index.
Fragment N/A Fragment.
Physical output interface N/A Output physical port.
CVLAN ID Mask CVLAN ID and mask.
Experiment N/A
Extension matching fields.
•Address ID—Unique identifier of an
address.
•
Application—Name of an application. For