Example
# Run the display acl acl-number command to view the Layer 2 ACL number, the number of
rules, the step value, and the content of the rules.
<Huawei> display acl 4001
L2 ACL 4001, 1 rule
Acl's step is 5
rule 5 permit l2-protocol ip destination-mac 0000-0000-0001 source-mac
0000-0000-0002
# Run the display acl name acl-name command to view the Layer 2 ACL name and number,
the number of rules, the step value, and the content of the rules.
<Huawei> display acl name test
L2 ACL test 4999, 1 rule
Acl's step is 5
rule 5 deny destination-mac 00e0-fc01-0304
# Run the display time-range command to view the configuration and status of the current time
range.
<Huawei> display time-range all
Current time is 09:13:37 12-27-2010 Thursday
Time-range : test1 ( Inactive )
13:00 to 18:00 working-day
13:00 to 18:00 off-day
10.6 Configuration Examples
This section provides several configuration examples of ACLs.
10.6.1 Example for Configuring a Basic ACL to Limit Access to the
FTP Server
In this example, a basic ACL is used to limit access to the FTP server.
Networking Requirements
As shown in Figure 10-1, the Router functions as an FTP server (172.16.104.110/24). The
requirements are as follows:
l All the users on subnet 1 (172.16.105.0/23) are allowed to access the FTP server at any
time.
l All the users on subnet 2 (172.16.107.0/23) are allowed to access the FTP server only at
the specified period of time.
l Other users are not allowed to access the FTP server.
The routes between the Router and subnets are reachable. You need to configure the Router to
limit user access.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 10 ACL Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
208
To Next Page
Loading...
