H3C S3600 Series - Page 651

Operation Manual – ACL
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
ACL Configuration
1-23
2) Create an ACL rule to filter TCP packets.
# Create ACL 5000 or enter ACL 5000 view.
[H3C] acl number 5000
# Define a rule for TCP packets(The VLAN VPN function not enabled).
[H3C-acl-user-5000] rule 1 deny 06 ff 27 time-range aaa
3) Apply the ACL on Ethernet1/0/1.
# Apply the ACL 5000 on Ethernet1/0/1.
[H3C] interface Ethernet1/0/1
[H3C-Ethernet1/0/1] packet-filter inbound user-group 5000