Operation Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches Chapter 1 ACL Configuration
Huawei Technologies Proprietary
1-28
2) Define the ACL for packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303.
# Enter the named link ACL, named as traffic-of-link.
[Quidway] acl name traffic-of-link link
# Define the rules for packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303.
[Quidway-acl-link-traffic-of-link] rule 1 deny ip ingress 00e0-fc01-0101 egress
00e0-fc01-0303 time-range huawei
3) Activate ACL.
# Activate the ACL traffic-of-link .
[Quidway] packet-filter link-group traffic-of-link
1.6 ACL Configuration Example of S3526E
1.6.1 Advanced ACL Configuration Example
I. Networking requirements
The interconnection between different departments on a company network is
implemented through the 100M ports of the Ethernet Switch. The payment query server
of the Financial Dept. is accessed via Ethernet1/1 (at 129.110.1.2). It is required to
properly configure the ACL and limit the department other than the Office of President
access the payment query server between 8:00 and 18:00. The Office of President (at
129.111.1.2) can access the server without limitation.
II. Networking diagram
Administration Department
subnet address
10.120.0.0
Financial Department
subnet address
10.110.0.0
Office of President
129.111.1.2
Pay query server
129.110.1.2
Switch
#1
#4
#3
#2
Connected to a router
Figure 1-5 Access control configuration example
III. Configuration procedure
To Next Page
Loading...
Need help?
General
