Chapter7ACLConguration
ApplyingACLonPhysicalPort
Step
CommandFunction
1
ZXR10(config)#interface<port-name>Thisentersinterface
congurationmode.
2
ZXR10(config-gei_1/x)#ipaccess-group
<acl-number>in
ThisappliesACLonphysical
port.
Note:
OnephysicalportonlycanapplyoneACL.Thenewcongura-
tionwillcovertheoldone.Forexample,ongei_1/1conguration
mode,thefollowingtwocommandsarecongured.
ipaccess-group10in
ipaccess-group100in
OnlyACL100takeseffects.
ApplyingACLonVLAN
ACLcanbeappliedonbothphysicalportandVLANafteritisde-
ned.
Step
CommandFunction
1
ZXR10(config)#vlan<vlan-id>ThisentersVLAN
congurationmode.
2
ZXR10(config-vlanX)#ipaccess-group{<acl-numbe
r><acl-name>}in
ThisappliesACLonVLAN.
Note:
1.Currently,ACLtypethatVLANbindsonlysupportsIPv4hybrid
ACL
2.OneVLANcanonlyapplyoneACL,thenewcongurationwill
covertheoldone.Forexample,invlancongurationmode,
thefollowingtwocommandsarecongured
ipaccess-group300in
ipaccess-group305in
onlyACL305takeseffects.
CondentialandProprietaryInformationofZTECORPORATION65