Operation Manual – ACL
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 ACL Configuration
Huawei Technologies Proprietary
1-20
# Define an ACL rule to deny packets with the source MAC address of 00e0-fc01-0101
and destination MAC address of 00e0-fc01-0303, specifying the time range named test
for the ACL rule.
[Quidway-acl-ethernetframe-4000] rule 1 deny source 00e0-fc01-0101
ffff-ffff-ffff dest 00e0-fc01-0303 ffff-ffff-ffff time-range test
[Quidway-acl-ethernetframe-4000] quit
3) Activate the ACL.
# Activate ACL 4000.
[Quidway] interface GigabitEthernet1/1/1
[Quidway-GigabitEthernet1/1/1] packet-filter inbound link-group 4000
1.9.4 User-Defined ACL Configuration Example
I. Network requirements
Create a user-defined ACL to deny all TCP packets within the time range from 8:00 to
18:00 everyday. Apply the ACL on Ethernet1/0/1 port.
II. Network diagram
Switch
#1
To router
Figure 1-4 Network diagram for user-defined ACL configuration
III. Configuration procedure
Note:
Only the commands related to the ACL configuration are listed below.
1) Define the time range.
# Define the time range ranging from 8:00 to 18:00.
[Quidway] time-range aaa 8:00 to 18:00 daily
2) Create an ACL rule to filter TCP packets.
# Create ACL 5000.
[Quidway] acl number 5000
# Define a rule for TCP packets.
To Next Page
Loading...
Need help?
General