Zte ZXA10 C300 - Configuring a Layer-2 ACL

ZXA10C300CongurationManual(CLI)
ZXAN(config)#aclextendednumber101
ZXAN(config-ext-acl)#
Note:
TheextendedACLnumberrangesfrom100to199.AnextendedACLcanbeapplied
toanEthernetinterfaceonly.
2.ConguretheACLrules.
ZXAN(config-ext-acl)#rule1denytcp192.168.1.00.0.0.255eqtelnetany
ZXAN(config-ext-acl)#rule2permittcpanyeqtelnetany
ZXAN(config-ext-acl)#exit
Note:
EachextendedACLsupportsupto1024rules.
Ifthetimerangeisnotcongured,theruleisalwayseffective.
3.InEthernetinterfacecongurationmode,applytheACL.
ZXAN(config)#interfacegei_1/21/1
ZXAN(config-if)#ipaccess-group101in
4.(Optional)QuerytheACLconguration.
ZXAN(config-if)#showacl101
aclextendnumber101
rule1denytcp192.168.1.00.0.0.255eqtelnetany
rule2permittcpanyeqtelnetany
5.(Optional)QuerytheinterfaceboundwiththeACL.
ZXAN(config-if)#showaccess-listbound
InterfaceDirectionTypeStatusAclnumber/name
gei_1/21/1inV4EXTsuccessful101
–EndofSteps–
8.3ConguringaLayer-2ACL
Thissectiondescribeshowtocongurealayer-2ACLandapplyittoanEthernetinterface.
8-4
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential