1-10
# Apply rule 1 of Layer 2 ACL 4000 on all ports in VLAN 20 to filter outbound packets. Here, it is
assumed that the ACL and its rule numbered 1 and the VLAN are already configured.
[Sysname] packet-filter vlan 20 outbound link-group 4000 rule 1
# Apply rule 2 of user-defined ACL 5000 on all ports in VLAN 30 to filter inbound packets. Here, it is
assumed that the ACL and its rule numbered 2 and the VLAN are already configured.
[Sysname] packet-filter vlan 30 inbound user-group 5000 rule 2
# Apply rule 1 of advanced ACL 3000 and rule 2 of Layer 2 ACL 4000 on all ports in VLAN 40 to filter
inbound packets. Here, it is assumed that the ACLs and their rules and the VLAN are already
configured.
[Sysname] packet-filter vlan 40 inbound ip-group 3000 rule 1 link-group 4000 rule 2
After completing the above configuration, you can use the display packet-filter command to view
information about packet filtering.
rule (for Basic ACLs)
Syntax
rule [ rule-id ] { deny | permit} [ rule-string ]
undo rule rule-id [ fragment | source | time-range ]*
View
Basic ACL view
Parameters
Parameters of the rule command
rule-id: ACL rule ID, in the range of 0 to 65534.
deny: Drops the matched packets.
permit: Permits the matched packets.
rule-string: ACL rule information, which can be a combination of the parameters described in
Table 1-6.
To Next Page
Loading...
