H3C S3100 8C SI - Assigning an ACL to a Port Group; Assigning an ACL to a Port

Operation Manual – ACL
H3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration
1-12
1.3.3 Assigning an ACL to a Port Group
I. Configuration prerequisites
Before applying ACL rules to a VLAN, you need to define the related ACLs. For
information about defining an ACL, refer to section
1.2.2 Configuring Basic ACL,
section
1.2.3 Configuring Advanced ACL, section 1.2.4 Configuring Layer 2 ACL.
II. Configuration procedure
Table 1-7 Assign an ACL to a port group
Operation Command Description
Enter system view
system-view
—
Enter port group
view
port-group group-id —
Apply an ACL to the
port group
packet-filter inbound
acl-rule
Required
For description on the acl-rule
argument, refer to ACL
Command.
 Note:
After an ACL is assigned to a port group, it will be automatically assigned to the ports
that are subsequently added to the port group.
III. Configuration example
# Apply ACL 2000 to port group 1 to filter the inbound packets on all the ports in the port
group.
<Sysname> system-view
[Sysname] port-group 1
[Sysname-port-group-1] packet-filter inbound ip-group 2000
1.3.4 Assigning an ACL to a Port
I. Configuration prerequisites
Before applying ACL rules to a VLAN, you need to define the related ACLs. For
information about defining an ACL, refer to section
1.2.2 Configuring Basic ACL,
section
1.2.3 Configuring Advanced ACL, section 1.2.4 Configuring Layer 2 ACL.