Operation Manual – ACL
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
ACL Configuration
1-19
Table 1-18 Display ACL configuration
Operation Command Description
Display a configured
ACL or all the ACLs
display acl { all | acl-number }
Display a time range
or all the time ranges
display time-range { all | time-name }
Display the
information about
packet filtering
display packet-filter { interface
interface-type interface-number | unitid
unit-id }
These
commands
can be
executed in
any view.
1.9 ACL Configuration Example
1.9.1 Basic ACL Configuration Example
I. Network requirements
Apply an ACL on GigabitEthernet1/1/1 to filter packets sourced from 10.1.1.1 from 8:00
to 18:00 everyday.
II. Network diagram
Switch
#1
To router
Switch
#1
To router
Figure 1-1 Network diagram for basic ACL configuration
III. Configuration procedure
Note:
Only the commands related to the ACL configuration are listed below.
1) Define the time range
# Define a periodic time range that is active from 8:00 to 18:00 everyday.
<H3C> system-view
[H3C] time-range test 8:00 to 18:00 daily
2) Define an ACL for packets with the source IP address of 10.1.1.1.
# Create ACL 2000 or enter ACL 2000 view.