Ruijie RG-S2900G-E Series - Page 780

Configuration Guide Access Control List Configuration
Command
Function
Ruijie(config)# security access-group
acl-name
Configure a security tunnel on the interface.
If the interface is set as an exception port, remove the setting and then configure the security tunnel
on the interface.
The following example configures a security tunnel.
Set port 4 as security port and bind IP address and MAC address
Ruijie(config)#interface FastEthernet 0/4
Ruijie(config-if)#switchport port-security
Ruijie(config-if)#switchport port-security mac-address 0000.0000.0011 ip-address
192.168.6.3
Only the packets whose source IP address is 192.168.6.3 and MAC address is 0000.0000.0011 can
flow in the switch from port 4. To receive IPX packets, set a security tunnel as follows:
Ruijie#configure
Ruijie(config)#expert access-list extended safe_channel
Ruijie(config-exp-nacl)#permit ipx any any
Ruijie(config-exp-nacl)#exit
Ruijie(config)#security global access-group safe_channel
Or configure a security tunnel on the interface:
Ruijie#configure
Ruijie(config)#expert access-list extended safe_channel
Ruijie(config-exp-nacl)#permit ipx any any
Ruijie(config-exp-nacl)#exit
Ruijie(config)#interface FastEthernet 0/4
Ruijie(config-if)#security access-group safe_channel
Configuring the List Remark
The ACL remark and ACE remark functions are provided for the ACL configuration and display.
Note
 Up to one ACL remark and 2048 ACE remarks are configured in one
ACL.
 The length of each remark is 100 bytes.
In the privileged configuration mode, execute the following commands to configure the ACL remark: