Acl Configuration Example - 3Com 7757 Configuration Manual

ACL Configuration
Example
Basic ACL Configuration
Example
Network requirements
Through basic ACL configuration, packets from the host with the source IP address
of 10.1.1.1 (the host is connected to the switch through Ethernet 2/0/1 port) are
to be filtered within the time range from 8:00 to 18:00 everyday.
Network diagram
Figure 166 Network diagram for basic ACL configuration
PC 1
10 .1 .1.1
PC 2
Configuration procedure
n
Only the commands related to the ACL configuration are listed below.
1 Define the time range
# Define the time range from 8:00 to 18:00.
<SW7750> system-view
[SW7750] time-range test 8:00 to 18:00 daily
2 Define an ACL for packets with the source IP address of 10.1.1.1.
# Enter ACL 2000.
[SW7750] acl number 2000
# Define an access rule to deny packets with their source IP addresses being
10.1.1.1.
[SW7750-acl-basic-2000] rule 1 deny source 10.1.1.1 0 time-range test
[SW7750-acl-basic-2000] quit
3 Apply the ACL on the port
# Apply ACL 2000 on the port.
[SW7750] interface Ethernet 2/0/1
[SW7750-Ethernet2/0/1] qos
[SW7750-qosb-Ethernet2/0/1] packet-filter inbound ip-group 2000
Eth2 /0/1
Switch

ACL Configuration Example

To the router
653