DGS-3610 Series Configuration Guide Chapter 44 Access Control List Configuration
DGS-3610(config)# access-list 101 permit tcp 192.168.12.0 0.0.0.255 any eq telnet
time-range check
DGS-3610(config)# access-list 101 deny icmp 192.168.12.0 0.0.0.255 any
DGS-3610(config)# access-list 101 deny ip 2.2.2.0 0.0.0.255 any
DGS-3610(config)# access-list 101 deny ip any any
Configure the time range
DGS-3610(config)# time-range check
DGS-3610(config-time-range)# periodic weekdays 8:30 to 17:30
For access list 101. the last rule statement access-list 101 deny ip any
any is not needed, for the ending part of the access list implicates a deny
any rule statement.
Switch A configuration:
DGS-3610(config)# hostname DGS-3610
DGS-3610(config)# interface GigabitEthernet 0/1
DGS-3610(config-if)# ip address 192.168.202.1 255.255.255.0
DGS-3610(config)# interface GigabitEthernet 0/2
DGS-3610(config-if)# ip address 2.2.2.1 255.255.255.0
44.3 Configuring MAC Extended
Access List
To configure MAC access lists on a device, you must specify unique names or numbers for
the access lists of a protocol to uniquely identifying each access list inside the protocol. The
following table lists the range of the numbers that can be used to specify MAC access lists.
44.3.1 Configuration of MAC Extended
Access List
When you create an MAC access list, defined rules will be applied to all packets on a device.
The device decides to forward or block a packet by judging whether the packet matches the
rules.
The typical rules defined in MAC access lists are as follows:
Source MAC address
Destination MAC address
Ethernet protocol type
Time-range
To Next Page
Loading...
Need help?
General