1-13
Configuration example
# Apply ACL 2000 to VLAN 10 to filter the inbound packets of VLAN 10 on all the ports.
<Sysname> system-view
[Sysname] packet-filter vlan 10 inbound ip-group 2000
Assigning an ACL to a Port Group
Configuration prerequisites
Before applying ACL rules to a VLAN, you need to define the related ACLs. For information about
defining an ACL, refer to section
Configuring Basic ACL, section Configuring Advanced ACL, section
Configuring Layer 2 ACL, and section Configuring an IPv6 ACL.
Configuration procedure
Table 1-8 Assign an ACL to a port group
Operation Command Description
Enter system view
system-view
—
Enter port group view
port-group group-id
—
Apply an ACL to the port
group
packet-filter inbound
acl-rule
Required
For description on the acl-rule argument,
refer to ACL Command.
After an ACL is assigned to a port group, it will be automatically assigned to the ports that are
subsequently added to the port group.
Configuration example
# Apply ACL 2000 to port group 1 to filter the inbound packets on all the ports in the port group.
<Sysname> system-view
[Sysname] port-group 1
[Sysname-port-group-1] packet-filter inbound ip-group 2000
Assigning an ACL to a Port
Configuration prerequisites
Before applying ACL rules to a VLAN, you need to define the related ACLs. For information about
defining an ACL, refer to section
Configuring Basic ACL, section Configuring Advanced ACL, section
Configuring Layer 2 ACL, and section Configuring an IPv6 ACL.
To Next Page
Loading...
Need help?
General