Zte ZXR10 8900 Series - Applying ACL to Physical Port

ZXR108900SeriesUserManual(BasicCongurationVolume)
Step
CommandFunction
1
ZXR10(config)#time-rangeenableThisenablestimerange
function
2
ZXR10(config)#time-range<time-range-name>Thisenterstimerange
congurationmode
3
ZXR10(config-tr)#absolutestart<hh:mm:ss><mm-d
d-yyyy>[end<hh:mm:ss><mm-dd-yyyy>]
Thisconguresabsolutetime
range
4
ZXR10(config-tr)#periodic{daily|monday|tuesday
|wednesday|thursday|friday|staturday|
sunday|weekdays|weekend}<hh:mm:ss>
to{daily|monday|tuesday|wednesday|
thursday|friday|staturday|sunday|weekdays
|weekend}<hh:mm:ss>
Thisconguresperiodictime
range
Note:
Congurationoftimerangehasthefollowingsituations:
�Congurationofabsolutetimerange:congurethestarttime
andendtimeofthetimerange.
�Congurationofperiodictimerange:congurethestarttime
andendtimeoftheperiod.
ApplyingACLtoPhysicalPort
ToapplyACLtophysicalports,performthefollowingsteps.
Step
CommandFunction
1
ZXR10(config)#interface<port-name>Thisentersportconguration
mode
2
ZXR10(config-if)#ipaccess-group<acl-number>{i
n|out|vfp}
ThisbindsACLtophysical
ports
Note:
Eachphysicalporthas“in”and“out”direction.ACLcanonlybe
appliedoneitherofthedirections.AnewconguredACLcovers
theoldACL.
Forexample,thefollowingcommandsareconguredinportcon-
gurationmode.
ZXR10(config-if)#ipaccess-group10in
ZXR10(config-if)#ipaccess-group100in
Inthissituation,onlyACL100iseffectiveonthisportin“in”di-
rection.Congurationin“out”directionissimilar .
84CondentialandProprietaryInformationofZTECORPORATION