Huawei Quidway S3900 Series

To Next Page

To Previous Page

Operation Manual – ACL

Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 1 ACL Configuration

Huawei Technologies Proprietary

1-21

[Quidway-acl-user-5000] rule 1 deny 06 ff 35 time-range aaa

3) Activate the ACL.

# Activate ACL 5000.

[Quidway] interface Ethernet1/0/1

[Quidway-Ethernet1/0/1] packet-filter inbound user-group 5000

Main Page

Table of Contents10
- Default Chapter4
  - About this Manual4
- Chapter 1 Obtaining the Documentation11
  - Software Release Notes12
- Chapter 2 Documentation and Software Version13
- Chapter 4 Networking Applications20
  - Application in Large Enterprise and Campus Networks21
Table of Contents23
- Introduction to the Cli24
  - Switching between User Levels25
  - Configuring the Level of a Specific Command in a Specific View26
- Cli Features32
Table of Contents36
- Default Chapter38
- Chapter 3 Logging in through Telnet58
- Chapter 6 Logging in through Nms87
  - Displaying Source Ip Address Configuration89
  - Controlling Telnet Users90
- Chapter 8 User Control90
VLAN Overview/Vlan Configuration103
- Chapter 1 Vlan Overview104
- Vlan Overview104
  - Introduction to Vlan104
- Chapter 2 Vlan Configuration111
IP Address Configuration/Ip Performance Configuration118
- Chapter 1 Ip Address Configuration119
- Ip Address Overview119
  - Ip Address Classification and Representation119
- Troubleshooting123
  - Ip Performance Configuration125
  - Chapter 2 Ip Performance Configuration125
Management VLAN Configuration/Dhcp/Bootp Client Configuration129
- Chapter 1 Management Vlan Configuration130
- Management Vlan130
- Static Route130
- Chapter 2 Dhcp/Bootp Client Configuration134
Voice VLAN Configuration139
- Chapter 1 Voice Vlan Configuration140
  - Configuring Operation Modes of Voice Vlan According to Voice Stream141
  - Supporting Information of Voice Vlan on Various Ports141
- Voice Vlan Overview140
- Configuration Prerequisites143
  - Configuring a Voice Vlan to Operate in Automatic Mode143
  - Configuring a Voice Vlan to Operate in Manual Mode145
- Voice Vlan Configuration143
- Voice Vlan Configuration Displaying147
- Voice Vlan Configuration Example (Automatic Mode)147
  - Voice Vlan Configuration Example (Manual Mode)148
Gvrp Configuration150
- Chapter 1 Gvrp Configuration151
Port Basic Configuration158
- Chapter 1 Port Basic Configuration159
- Ethernet Port Overview159
- Ethernet Port Configuration162
- Ethernet Port Configuration Example170
- Troubleshooting Ethernet Port Configuration171
Link Aggregation Configuration172
- Chapter 1 Link Aggregation Configuration173
- Introduction to Lacp173
- Introduction to Link Aggregation173
- Link Aggregation Configuration179
- Displaying and Maintaining Link Aggregation Configuration183
- Link Aggregation Configuration Example184
Port Security Configuration/Port Binding Configuration190
- Chapter 1 Port Security Configuration191
- Introduction to Port Security191
- Chapter 2 Port Binding Configuration199
  - Introduction to Port Binding199
    - Configuring Port Binding199
    - Port Binding Overview199
  - Port Binding Configuration Example200
Dldp Configuration201
- Chapter 1 Dldp Configuration202
  - Dldp Fundamentals203
  - Precautions During Dldp Configuration207
- Dldp Overview202
- Dldp Configuration208
  - Dldp Configuration Tasks208
  - Resetting Dldp Status209
- Dldp Network Example210
Mac Address Table Management213
- Chapter 1 Mac Address Table Management214
  - Introduction to Mac Address Learning214
- Configuring Mac Address Table Management216
- Displaying and Maintaining Mac Address Table Configuration219
Auto Detect Configuration/Auto Detect Implementation221
- Chapter 1 Auto Detect Configuration222
- Introduction to the Auto Detect Function222
- Chapter 2 Auto Detect Implementation225
Mstp Configuration233
- Chapter 1 Mstp Configuration235
  - Basic Mstp Terminologies236
  - Implementation of Mstp239
- Mstp Overview235
  - Mstp Protocol Data Unit235
- Root Bridge Configuration241
- Leaf Node Configuration259
  - Path Cost Configuration261
  - Port Priority Configuration264
- The Mcheck Configuration265
- Protection Function Configuration266
- Digest Snooping Configuration271
  - Bpdu Packets Drop Configuration271
- Rapid Transition Configuration273
- Bpdu Tunnel Configuration276
- Mstp Displaying and Debugging278
- Mstp Implementation Example278
- Bpdu Tunnel Configuration Example281
Table of Contents284
- Default Chapter287
- Chapter 5 Ip Routing Policy Configuration344
Table of Contents357
- Default Chapter360
- Chapter 7 Pim Configuration411
802.1X Configuration/Habp Configuration454
- Chapter 1 802.1X Configuration455
- Chapter 2 Habp Configuration477
  - Habp Client Configuration478
  - Displaying Habp478
Table of Contents480
- Introduction to Aaa482
- Introduction to Isp Domain483
- Introduction to Radius483
- Introduction to Hwtacacs489
- Aaa Configuration495
- Radius Configuration504
- Hwtacacs Configuration516
- Chapter 2 Ead Configuration530
- Introduction to Ead530
- Typical Network Application of Ead530
- Ead Configuration531
- Ead Configuration Example531
Vrrp Configuration534
- Chapter 1 Vrrp Configuration535
- Vrrp Overview535
- Vrrp Configuration541
- Displaying and Maintaining Vrrp544
- Vrrp Configuration Example544
- Troubleshooting Vrrp553
Table of Contents555
- Authentication Configuration556
- Centralized Mac Address Authentication Overview556
- Centralized Mac Address Authentication Configuration557
- Centralized Mac Address Authentication Configuration Example560
- Displaying and Debugging Centralized Mac Address Authentication560
Arp Configuration/Resilient Arp Configuration562
- Chapter 1 Arp Configuration563
- Chapter 2 Resilient Arp Configuration572
Dhcp Overview/Dhcp Server Configuration575
- Chapter 1 Dhcp Overview577
- Dhcp Ip Address Assignment577
  - Ip Address Assignment Policy577
- Introduction to Dhcp577
- Chapter 2 Dhcp Server Configuration582
- Chapter 3 Dhcp Relay Configuration620
- Chapter 4 Dhcp Snooping Configuration632
- Chapter 5 Dhcp Accounting Configuration636
Acl Configuration639
- Acl Overview640
- Chapter 1 Acl Configuration640
  - Ways to Apply Acl on a Switch640
  - Acl Match Order641
- Configuring Time Ranges642
  - Acls Based on Time Ranges642
  - Types of Acls Supported by the Ethernet Switch642
- Defining Basic Acls643
  - Configuration Preparation644
- Defining Advanced Acls645
- Defining Layer 2 Acls650
- Defining User-Defined Acls652
- Applying Acls on Ports654
- Displaying Acl Configuration655
- Acl Configuration Example656
Qos Configuration661
- Chapter 1 Qos Configuration663
- Traffic Classification663
- Chapter 2 Qos Profile Configuration692
Mirroring Configuration704
- Chapter 1 Mirroring Configuration705
  - Remote Port Mirroring — Rspan705
- Port Mirroring705
- Traffic Mirroring705
- Mirroring Configuration of S3900-Ei708
- Mirroring Supported by S708
- Mirroring Configuration of S3900-Si721
Irf Fabric Configuration723
- Chapter 1 Irf Fabric Configuration724
  - Introduction to Irf724
- Peer Fabric Port Detection725
- Irf Fabric Configuration728
- Displaying and Debugging Irf Fabric733
- Irf Fabric Configuration Example734
  - Networking Requirements734
  - Networking Diagram734
Cluster736
- Chapter 1 Cluster737
- Cluster Overview737
- Management Device Configuration743
- Member Device Configuration748
  - Member Device Configuration Tasks748
  - Configure Member Devices to Access Ftp/Tftp Server of the Cluster750
- Intra-Cluster Configuration750
- Displaying and Maintaining a Cluster751
- Cluster Configuration Example752
  - Basic Cluster Configuration Example752
  - Nm Interface Configuration Example756
Poe Configuration/Poe Profile Configuration758
- Chapter 1 Poe Configuration759
- Poe Overview759
- Chapter 2 Poe Profile Configuration768
  - Displaying Poe Profile Configuration770
  - Poe Profile Configuration Example771
Udp-Helper Configuration773
- Chapter 1 Udp-Helper Configuration774
Snmp Configuration/Rmon Configuration778
- Chapter 1 Snmp Configuration779
- Snmp Overview779
  - Snmp Versions779
- Chapter 2 Rmon Configuration789
Ntp Configuration795
- Chapter 1 Ntp Configuration796
- Introduction to Ntp796
- Ntp Implementation Mode Configuration801
  - Configuring Ntp Implementation Modes802
- Access Control Permission Configuration804
- Ntp Authentication Configuration804
  - Configuring Ntp Authentication805
- Configuration of Optional Ntp Parameters807
- Displaying and Debugging Ntp808
Ssh Terminal Services819
- Chapter 1 Ssh Terminal Services820
- Ssh Terminal Services820
  - Introduction to Ssh820
- Sftp Service835
Ftp/Tftp Lighting Configuration843
- File Attribute Configuration844
  - Introduction to File Attributes844
  - Configuring File Attributes845
- File System Configuration846
- Configuration Backup and Restore851
  - Operation Preparation852
  - Operation Procedure852
- Chapter 2 Ftp/Tftp Lighting Configuration853
- Ftp Lighting Configuration853
  - Introduction to Ftp853
  - Ftp Lighting Procedure853
- Tftp Lighting Configuration855
  - Tftp Lighting Procedure856
Ftp and Tftp Configuration858
- Chapter 1 Ftp and Tftp Configuration859
- Ftp Configuration859
- Tftp Configuration872
  - Introduction to Tftp872
  - Tftp Configuration Example875
Information Center878
- Chapter 1 Information Center879
- Information Center Overview879
- Information Center Configuration883
- Displaying and Debugging Information Center Configuration892
- Information Center Configuration Examples893
Table of Contents898
- Chapter 1 Bootrom and Host Software Loading900
- Introduction to Loading Approaches900
- Local Software Loading900
- Chapter 3 Network Connectivity Test923
  - Introduction to Device Management925
  - Device Management Configuration925
- Chapter 4 Device Management925
Vlan-Vpn Configuration/Bpdu Tunnel Configuration932
- Chapter 1 VLAN-VPN Configuration933
- Chapter 2 BPDU Tunnel Configuration941

Huawei Quidway S3900 Series - Page 660

Table of Contents

Other manuals for Huawei Quidway S3900 Series

Related product manuals