Name: H3C S5120-EI Series
Brand: H3C
Rating: 4 (1 reviews)

To Next Page

To Previous Page

8-7

Figure 8-3 Configure an ACL to control the access of HTTP users to the switch

Switch

10.110.100.46

Host A

IP network

Host B

10.110.100.52

Configuration procedure

# Create a basic ACL.

<Sysname> system-view

[Sysname] acl number 2030 match-order config

[Sysname-acl-basic-2030] rule 1 permit source 10.110.100.52 0

# Reference the ACL to allow only Web users using IP address 10.110.100.52 to access the switch.

[Sysname] ip http acl 2030

Table of Contents7
- Default Chapter3
  - About this Manual3
- 1 Obtaining the Documentation8
  - H3C Website8
  - Software Release Notes8
- 2 Product Features9
  - Introduction to Product9
  - Feature Lists9
- 3 Features11
Ethernet Interface Configuration37
- Ethernet Interface Configuration38
  - General Ethernet Interface Configuration38
  - Displaying and Maintaining an Ethernet Interface49
Link Aggregation Configuration50
- Link Aggregation Configuration51
- Overview51
- Link Aggregation Configuration Task List55
- Configuring an Aggregation Group56
  - Configuring a Static Aggregation Group56
  - Configuring a Dynamic Aggregation Group57
- Configuring an Aggregate Interface57
- Configuring a Load Sharing Mode for Load-Sharing Link Aggregation Groups59
- Displaying and Maintaining Link Aggregation60
- Link Aggregation Configuration Examples60
Dldp Configuration68
- DLDP Configuration69
- Overview69
  - DLDP Introduction70
  - DLDP Fundamentals70
- DLDP Configuration Task List76
- Enabling DLDP77
- Setting DLDP Mode77
- Setting the Delaydown Timer78
- Setting the Interval for Sending Advertisement Packets78
- Setting the Port Shutdown Mode78
- Configuring DLDP Authentication79
- Resetting DLDP State79
  - Resetting DLDP State in System View80
  - Resetting DLDP State in Port View/Port Group View80
- Displaying and Maintaining DLDP80
- DLDP Configuration Example81
- Troubleshooting82
Lldp Configuration84
- Introduction to LLDP85
- LLDP Configuration85
- LLDP Configuration Task List88
- Performing Basic LLDP Configuration88
- Configuring the Encapsulation Format for Lldpdus92
- Configuring CDP Compatibility93
  - Configuration Prerequisites94
  - Configuring CDP Compatibility94
- Configuring the Encapsulation Format of the Management Address93
- Configuring LLDP Trapping94
- Displaying and Maintaining LLDP95
- LLDP Configuration Examples95
  - LLDP Basic Configuration Example95
  - CDP-Compatible LLDP Configuration Example98
Mstp Configuration100
- MSTP Configuration102
- Configuration Task List115
- Configuring the Root Bridge117
- Configuring Leaf Nodes129
- Performing Mcheck132
- Configuring Digest Snooping133
- Configuring no Agreement Check135
  - Configuration Prerequisites136
  - Configuration Example137
- Configuring Protection Functions137
- Displaying and Maintaining MSTP141
- MSTP Configuration Example142
Smart Link Configuration146
- Smart Link Configuration147
- Smart Link Overview147
  - Terminology147
  - Operating Mechanism of Smart Link148
- Configuring a Smart Link Device149
  - Configuration Prerequisites149
  - Smart Link Device Configuration Example150
- Configuring an Associated Device151
  - Associated Device Configuration Example152
- Displaying and Maintaining Smart Link152
- Smart Link Configuration Examples152
  - Single Smart Link Group Configuration Example152
  - Multiple Smart Link Groups Load Sharing Configuration Example154
Monitor Link Configuration158
- Monitor Link Configuration159
- Overview159
  - Terminology159
  - How Monitor Link Works159
- Configuring Monitor Link160
- Displaying and Maintaining Monitor Link161
Table of Contents164
- 1 VLAN Configuration165
- 2 Isolate-User-VLAN Configuration182
- 3 Voice VLAN Configuration187
Table of Contents196
- Gvrp Configuration197
- Introduction to GVRP197
- Configuring GVRP Functions200
- GVRP Configuration Task List200
- Configuring GARP Timers201
- Displaying and Maintaining GVRP202
- GVRP Configuration Examples203
Table of Contents207
- Introduction to Qinq208
- Qinq Configuration208
- Configuring Basic Qinq212
  - Enabling Basic Qinq212
- Configuring Selective Qinq212
  - Configuring an Outer VLAN Tagging Policy212
- Qinq Configuration Task List212
- Configuring the TPID Value in VLAN Tags213
- Qinq Configuration Examples213
  - Basic Qinq Configuration Example213
  - Comprehensive Selective Qinq Configuration Example216
Bpdu Tunneling Configuration219
- BPDU Tunneling Configuration220
- Introduction to BPDU Tunneling220
  - Background220
  - BPDU Tunneling Implementation221
- Configuring BPDU Tunneling223
- BPDU Tunneling Configuration Examples224
  - BPDU Tunneling for STP Configuration Example224
  - BPDU Tunneling for PVST Configuration Example226
Ethernet Oam Configuration228
- Ethernet OAM Configuration229
- Ethernet OAM Overview229
- Configuring Basic Ethernet OAM Functions233
- Ethernet OAM Configuration Task List233
- Configuring Link Monitoring234
- Displaying and Maintaining Ethernet OAM Configuration236
- Enabling OAM Loopback Testing236
- Ethernet OAM Configuration Example237
Connectivity Fault Detection Configuration239
- Connectivity Fault Detection Configuration240
- Overview240
- Basic Configuration Tasks244
- CFD Configuration Task List244
- Configuring CC on Meps246
  - Configuration Prerequisites247
  - Configuring Procedure247
- Configuring LB on Meps247
  - Configuration Procedure248
- Configuring LT on Meps248
- CFD Configuration Examples249
- Displaying and Maintaining CFD249
Rrpp Configuration254
- RRPP Configuration255
- RRPP Overview255
- RRPP Configuration Task List264
- Configuring Master Node265
- Configuring Transit Node266
- Configuring Edge Node268
- Configuring Assistant Edge Node269
- Configuring Ring Group270
  - Configuration Prerequisites271
  - Configuring Ring Group271
- Displaying and Maintaining RRPP271
- RRPP Typical Configuration Examples272
- Troubleshooting287
Port Mirroring Configuration289
- Introduction to Port Mirroring290
  - Classification of Port Mirroring290
  - Implementing Port Mirroring290
- Port Mirroring Configuration290
- Configuring Local Port Mirroring292
- Configuring Remote Port Mirroring293
- Displaying and Maintaining Port Mirroring296
- Port Mirroring Configuration Examples296
  - Local Port Mirroring Configuration Example296
  - Remote Port Mirroring Configuration Example297
IP Addressing Configuration302
- IP Addressing Configuration303
- IP Addressing Overview303
- Configuring IP Addresses305
  - Assigning an IP Address to an Interface305
  - IP Addressing Configuration Example306
- Displaying and Maintaining IP Addressing307
Table of Contents308
- 1 ARP Configuration310
- 2 Proxy ARP Configuration316
- 3 ARP Attack Defense Configuration322
Table of Contents333
- 1 DHCP Overview335
- 2 DHCP Relay Agent Configuration343
- 3 DHCP Client Configuration354
- 4 DHCP Snooping Configuration357
- 5 BOOTP Client Configuration365
DNS Configuration368
- DNS Configuration369
- DNS Overview369
- Configuring the DNS Client372
  - Configuring Static Domain Name Resolution372
  - Configuring Dynamic Domain Name Resolution372
- Configuring the DNS Proxy373
- Displaying and Maintaining DNS373
- DNS Configuration Examples373
- Troubleshooting DNS Configuration378
IP Performance Optimization Configuration379
- Enabling Reception and Forwarding of Directed Broadcasts to a Directly Connected Network380
- IP Performance Optimization Configuration380
- IP Performance Overview380
- Configuring TCP Optional Parameters382
- Configuring ICMP to Send Error Packets383
- Displaying and Maintaining IP Performance Optimization385
Ipv6 Basics Configuration390
- Ipv6 Basics Configuration391
- Ipv6 Overview391
- Configuring Basic Ipv6 Functions400
  - Enabling Ipv6400
  - Configuring an Ipv6 Unicast Address400
- Ipv6 Basics Configuration Task List400
- Configuring Ipv6 NDP402
- Configuring PMTU Discovery405
  - Configuring a Static PMTU for a Specified Ipv6 Address405
  - Configuring the Aging Time for Dynamic Pmtus405
- Configuring Icmpv6 Packet Sending406
- Configuring Ipv6 TCP Properties406
- Configuring Ipv6 DNS Client408
  - Configuring Static Ipv6 Domain Name Resolution408
  - Configuring Dynamic Ipv6 Domain Name Resolution408
- Displaying and Maintaining Ipv6 Basics Configuration409
- Ipv6 Configuration Example410
- Troubleshooting Ipv6 Basics Configuration415
  - Dual Stack Overview417
  - Configuring Dual Stack417
Sflow Configuration419
- Sflow Configuration420
- Sflow Overview420
  - Introduction to Sflow420
  - Operation of Sflow420
- Configuring Sflow421
- Displaying and Maintaining Sflow421
- Sflow Configuration Example422
- Troubleshooting Sflow Configuration423
  - The Remote Sflow Collector Cannot Receive Sflow Packets423
IP Routing Overview425
- IP Routing and Routing Table426
  - Routing426
  - Routing Table426
- IP Routing Overview426
- Routing Protocol Overview428
  - Static Routing and Dynamic Routing428
  - Routing Protocols and Routing Priority428
- Displaying and Maintaining a Routing Table429
Static Routing Configuration431
- Introduction432
- Static Routing Configuration432
- Configuring a Static Route433
  - Configuration Prerequisites433
  - Configuration Procedure433
- Detecting Reachability of the Static Route's Nexthop434
  - Detecting Nexthop Reachability through Track434
- Displaying and Maintaining Static Routes435
- Static Route Configuration Example435
  - Basic Static Route Configuration Example435
Multicast Overview444
- Introduction to Multicast445
- Multicast Overview445
- Multicast Models449
- Multicast Architecture450
  - Multicast Addresses451
  - Multicast Protocols454
- Multicast Packet Forwarding Mechanism456
Igmp Snooping Configuration457
- IGMP Snooping Configuration458
- IGMP Snooping Overview458
- IGMP Snooping Configuration Task List462
- Configuring Basic Functions of IGMP Snooping463
- Configuring IGMP Snooping Port Functions464
- Configuring IGMP Snooping Querier468
- Configuring an IGMP Snooping Policy471
- Displaying and Maintaining IGMP Snooping475
- IGMP Snooping Configuration Examples476
- Troubleshooting IGMP Snooping Configuration484
  - Switch Fails in Layer 2 Multicast Forwarding484
  - Configured Multicast Group Policy Fails to Take Effect484
Multicast VLAN Configuration485
- Introduction to Multicast VLAN486
- Multicast VLAN Configuration486
- Configuring Sub-VLAN-Based Multicast VLAN488
  - Configuration Prerequisites488
- Multicast VLAN Configuration Task List488
- Configuring Port-Based Multicast VLAN489
- Displaying and Maintaining Multicast VLAN491
- Multicast VLAN Configuration Examples491
  - Sub-VLAN-Based Multicast VLAN Configuration491
  - Port-Based Multicast VLAN Configuration495
Mld Snooping Configuration498
- MLD Snooping Configuration499
- MLD Snooping Overview499
- MLD Snooping Configuration Task List503
- Configuring Basic Functions of MLD Snooping504
  - Configuration Prerequisites504
  - Enabling MLD Snooping504
- Configuring MLD Snooping Port Functions505
- Configuring MLD Snooping Querier509
- Configuring an MLD Snooping Policy512
- Displaying and Maintaining MLD Snooping516
- MLD Snooping Configuration Examples517
- Troubleshooting MLD Snooping524
  - Switch Fails in Layer 2 Multicast Forwarding524
  - Configured Ipv6 Multicast Group Policy Fails to Take Effect525
Ipv6 Multicast VLAN Configuration526
- Introduction to Ipv6 Multicast VLAN527
- Ipv6 Multicast VLAN Configuration527
- Configuring Ipv6 Sub-VLAN-Based Ipv6 Multicast VLAN529
  - Configuration Prerequisites529
  - Configuring Sub-VLAN-Based Ipv6 Multicast VLAN529
- Ipv6 Multicast VLAN Configuration Task List529
- Configuring Port-Based Ipv6 Multicast VLAN530
- Displaying and Maintaining Ipv6 Multicast VLAN532
- Ipv6 Multicast VLAN Configuration Examples532
  - Sub-VLAN-Based Multicast VLAN Configuration Example532
  - Port-Based Multicast VLAN Configuration Example535
Table of Contents540
- 1 Qos Overview542
- 2 Qos Policy Configuration546
- 3 Priority Mapping555
- 5 Congestion Management570
- 6 Traffic Mirroring Configuration578
User Profile Configuration581
- User Profile Configuration582
  - User Profile Overview582
  - Displaying and Maintaining User Profile584
Aaa Configuration587
- AAA Configuration589
- Introduction to AAA589
- Introduction to RADIUS590
- Introduction to HWTACACS595
  - Differences between HWTACACS and RADIUS595
  - Basic Message Exchange Process of HWTACACS596
- AAA Configuration Task List598
  - RADIUS Configuration Task List599
  - HWTACACS Configuration Task List600
- Protocols and Standards598
- Configuring AAA600
- Configuring RADIUS610
- Configuring HWTACACS618
- AAA Configuration Examples623
- Troubleshooting AAA628
  - Troubleshooting RADIUS628
  - Troubleshooting HWTACACS629
Ead Fast Deployment Configuration630
- 802.1X Overview632
- Configuring 802.1X644
- Configuring a Guest VLAN647
- Configuring an Auth-Fail VLAN647
- Displaying and Maintaining 802.1X648
- 802.1X Configuration Example649
- Guest VLAN and VLAN Assignment Configuration Example651
- ACL Assignment Configuration Example654
- EAD Fast Deployment Configuration656
- EAD Fast Deployment Overview656
  - Overview656
  - EAD Fast Deployment Implementation656
- Configuring EAD Fast Deployment657
  - Configuration Prerequisites657
  - Configuration Procedure657
- Displaying and Maintaining EAD Fast Deployment658
- EAD Fast Deployment Configuration Example659
- Troubleshooting EAD Fast Deployment660
  - Users Cannot be Redirected Correctly660
Habp Configuration661
- HABP Configuration662
Mac Authentication Configuration666
- MAC Authentication Configuration667
- MAC Authentication Overview667
  - RADIUS-Based MAC Authentication667
  - Local MAC Authentication667
- Related Concepts668
- Configuring MAC Authentication669
  - Configuration Prerequisites669
  - Configuration Procedure669
- Configuring a Guest VLAN670
  - Configuration Prerequisites670
  - Configuration Procedure670
- Displaying and Maintaining MAC Authentication671
- MAC Authentication Configuration Examples671
Portal Configuration677
- Portal Configuration678
- Portal Overview678
- Portal Configuration Task List683
- Basic Portal Configuration684
  - Configuration Prerequisites684
  - Configuration Procedure684
- Configuring a Portal-Free Rule685
- Configuring an Authentication Subnet686
- Logging out Users686
- Displaying and Maintaining Portal687
- Specifying a Mandatory Authentication Domain687
- Portal Configuration Examples688
- Troubleshooting Portal700
  - Inconsistent Keys on the Access Device and the Portal Server700
  - Incorrect Server Port Number on the Access Device701
Port Security Configuration702
- Introduction to Port Security703
- Port Security Configuration703
- Port Security Configuration Task List706
- Enabling Port Security707
  - Configuration Prerequisites707
  - Configuration Procedure707
- Setting the Maximum Number of Secure MAC Addresses707
- Setting the Port Security Mode708
  - Configuration Prerequisites708
  - Configuring Procedure709
- Configuring Port Security Features709
- Configuring Secure MAC Addresses711
  - Configuration Prerequisites711
  - Configuration Procedure711
- Displaying and Maintaining Port Security712
- Ignoring Authorization Information from the Server712
- Port Security Configuration Examples713
- Troubleshooting Port Security721
IP Source Guard Configuration723
- Configuring a Static Binding Entry724
- IP Source Guard Configuration724
- IP Source Guard Overview724
- Configuring Dynamic Binding Function725
- Displaying and Maintaining IP Source Guard726
- IP Source Guard Configuration Examples726
  - Static Binding Entry Configuration Example726
  - Dynamic Binding Function Configuration Example727
- Troubleshooting IP Source Guard729
  - Failed to Configure Static Binding Entries and Dynamic Binding Function729
Ssh2.0 Configuration/Sftp Service730
- 1 SSH2.0 Configuration731
- 2 SFTP Service754
Pki Configuration764
- Introduction to PKI765
- PKI Configuration765
- Configuring an Entity DN768
- PKI Configuration Task List768
- Configuring a PKI Domain770
- Submitting a PKI Certificate Request771
  - Submitting a Certificate Request in Auto Mode771
  - Submitting a Certificate Request in Manual Mode772
- Retrieving a Certificate Manually773
- Configuring PKI Certificate Verification774
- Deleting a Certificate775
- Destroying a Local RSA Key Pair775
- Configuring an Access Control Policy776
- Displaying and Maintaining PKI776
- PKI Configuration Examples777
- Troubleshooting PKI785
Table of Contents787
- Ssl Configuration788
- SSL Overview788
  - SSL Security Mechanism788
- SSL Configuration Task List789
- Configuring an SSL Server Policy790
  - Configuration Prerequisites790
  - SSL Server Policy Configuration Example791
- Configuring an SSL Client Policy792
  - Configuration Prerequisites793
  - Configuration Procedure793
- Displaying and Maintaining SSL793
- Troubleshooting SSL793
  - SSL Handshake Failure793
Public Key Configuration795
- Public Key Algorithm Overview796
- Public Key Configuration796
- Configuring the Local Asymmetric Key Pair797
- Configuring the Public Key of a Peer798
- Displaying and Maintaining Public Keys799
- Public Key Configuration Examples800
  - Configuring the Public Key of a Peer Manually800
  - Importing the Public Key of a Peer from a Public Key File801
Ipv4 Acl Configuration/Ipv6 Acl Configuration804
- Default Chapter806
- 2 Ipv4 ACL Configuration812
- 3 Ipv6 ACL Configuration822
- 4 ACL Application for Packet Filtering828
Table of Contents836
- 1 Logging in to an Ethernet Switch838
  - Introduction to User Interface838
- 2 Logging in through the Console Port841
- 3 Logging in through Telnet/Ssh853
- 4 User Interface Configuration Examples864
- 6 Logging in through NMS872
  - Connection Establishment Using NMS872
- 7 Specifying Source for Telnet Packets873
  - Specifying Source IP Address/Interface for Telnet Packets873
  - Displaying the Source IP Address/Interface Specified for Telnet Packets874
- 8 Controlling Login Users875
Basic Configurations882
- Basic Configurations883
- Configuration Display883
- CLI Features897
Table of Contents905
- Configuring the Exception Handling Method906
- Device Management Configuration Task List906
- Device Management Overview906
- Rebooting a Device907
- Configuring the Scheduled Automatic Execution Function908
- Disabling Boot ROM Access909
- Specifying a Boot File for the Next Device Boot909
- Configuring a Detection Interval910
- Upgrading Boot ROM910
- Clearing the 16-Bit Interface Indexes Not Used in the Current System911
- Identifying and Diagnosing Pluggable Transceivers911
- Displaying and Maintaining Device Management Configuration913
- Device Management Configuration Examples914
  - Remote Scheduled Automatic Upgrade Configuration Example (Centralized Device)914
  - Remote Scheduled Automatic Upgrade Configuration Example (Centralized Stacking Device)915
Table of Contents918
- 1 File System Management Configuration920
- 2 FTP Configuration937
- 3 TFTP Configuration952
Https Configuration958
- Enabling the HTTP Service959
  - Http Configuration959
- HTTP Overview959
- Associating the HTTP Service with an ACL960
- Configuring the Port Number of the HTTP Service960
- Displaying and Maintaining HTTP960
- HTTPS Configuration961
- HTTPS Configuration Task List961
- HTTPS Overview961
- Associating the HTTPS Service with an SSL Server Policy962
- Enabling the HTTPS Service962
- Associating the HTTPS Service with a Certificate Attribute Access Control Policy963
- Configuring the Port Number of the HTTPS Service963
- Associating the HTTPS Service with an ACL964
- Displaying and Maintaining HTTPS964
- HTTPS Configuration Example964
Snmp Configuration/Mib Style Configuration967
- 1 SNMP Configuration968
- 2 MIB Style Configuration979
  - Setting the MIB Style979
  - Displaying and Maintaining MIB979
Rmon Configuration980
- RMON Configuration981
- RMON Overview981
  - Working Mechanism981
  - RMON Groups982
- Configuring RMON983
  - Configuration Prerequisites983
  - Configuration Procedure983
- Displaying and Maintaining RMON985
- RMON Configuration Example985
Mac Address Table Management Configuration/Mac Information Configuration987
- 1 MAC Address Table Management Configuration988
- 2 MAC Information Configuration993
System Maintaining and Debugging997
- System Maintaining and Debugging998
- System Maintaining and Debugging Overview998
  - Introduction to System Maintaining998
  - Introduction to System Debugging999
- System Maintaining and Debugging1000
  - System Maintaining1000
  - System Debugging1000
- System Maintaining Example1001
Information Center Configuration1002
- Information Center Configuration1003
- Information Center Overview1003
  - Introduction to Information Center1003
  - System Information Format1006
- Configuring Information Center1008
- Displaying and Maintaining Information Center1015
- Information Center Configuration Examples1015

H3C S5120-EI Series User Manual

Table of Contents

Other manuals for H3C S5120-EI Series

Questions and Answers:

H3C S5120-EI Series Specifications

Related product manuals

Brand	H3C
Model	S5120-EI Series
Category	Switch
Language	English