User Guide 818
Configuring ACL Configuration Example for ACL
3
Configuration Example for ACL
3.1 Configuration Example for MAC ACL
3.1.1 Network Requirements
A company forbids the employees in the R&D department to visit the internal forum during
work hours. While the manager of the R&D department can get access to the internal forum
without limitation.
As shown below, the internal forum server is connected to the switch via port 1/0/1, and
computers in the R&D department are connected to the switch via port 1/0/2.
Figure 3-1 Network Topology
Gi1/0/1
R&D manager's PC
MAC: 8C-DC-D4-40-A1-79
R&D Department
Internal Forum Server
MAC: 40-61-86-FC-71-56
Gi1/0/2
3.1.2 Configuration Scheme
To meet the requirements above, you can set up packet filtering by creating an MAC ACL
and configuring rules for it.
■ Time Range Configuration
Create a time range entry for the work hour of the company. Apply the time range to the
ACL rule which blocks the access to internal forum server.
To Next Page
Loading...
