H3C S5120-EI Series User Manual

4-1
4 ACL Application for Packet Filtering
When applying an ACL for packet filtering, go to these sections for information you are interested in:
z Filtering Ethernet Frames
z Filtering IPv4 Packets
z Filtering IPv6 Packets
z Configuring Packet Filtering Statistics Function
z ACL Application Examples
You can apply an ACL to the inbound or outbound direction of an ethernet interface or VLAN interface
to filter received or sent packets such as Ethernet frames, IPv4 packets, and IPv6 packets.
Filtering Ethernet Frames
Follow these steps to apply an Ethernet frame header ACL to an interface to filter Ethernet frames:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter Ethernet
interface view
interface interface-type
interface-number
Enter
interface
view
Enter VLAN
interface view
interface vlan-interface
vlan-id
Use either command
Apply an Ethernet frame
header ACL to the interface to
filter Ethernet frames
packet-filter { acl-number |
name acl-name } { inbound |
outbound }
Required
By default, an interface does
not filter Ethernet frames.
Filtering IPv4 Packets
Follow these steps to apply an IPv4 ACL to an interface to filter IPv4 packets:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter Ethernet
interface view
interface interface-type
interface-number
Enter
interface
view
Enter VLAN
interface view
interface vlan-interface
vlan-id
Use either command
Apply a basic or advanced IPv4
ACL to the interface to filter
IPv4 packets
packet-filter { acl-number |
name acl-name } { inbound |
outbound }
Required
By default, an interface does
not filter IPv4 packets.

H3C S5120-EI Series Specifications

General

Brand	H3C
Model	S5120-EI Series
Category	Switch
Language	English