Vlan-Aconfigurationl Configuration; Vlan-Acl Overview; Configuration - 3Com 8807 Configuration Manual

24

VLAN-ACL Overview

VLAN-ACL

Configuration

Configuration
Prerequisites
Configuring a VLAN-ACL
VLAN-ACL C
VLAN-ACL is VLAN-based ACL. You can configure QACL for a VLAN to control
accesses made to all ports in the VLAN.
VLAN-ACL enables you to manage a network in an easier way. After you configure
QACL for a VLAN, the system synchronizes the configuration to all member ports
in the VLAN automatically. Therefore you need not to configure QACL for every
port.
The VLAN for which you configure QACL must meet the following requirements:
The VLAN has member ports.
■
The VLAN has no MPLS intermixing ports.
■
The default flow template is applied to ports in the VLAN.
■
Table 183 Configure a VLAN-ACL
Configuration step Command
Enter system view system-view
Create an ACL and acl { number acl-number | name acl-name [
enter the advanced | basic ] } [ match-order { config |
corresponding view auto } ]
Define a rule rule
Quit ACL view quit
Enter VLAN view vlan vlan-id
Configure packet packet-filter inbound ip-group {
filtering (activating acl-number | acl-name } [ rule rule [
ACLs) system-index index ] ]
traffic-limit inbound ip-group { acl-number
| acl-name } [ rule rule [ system-index index ]
Configure traffic ] [ tc-index index ] { traffic-index
policing traffic-index | cir cbs ebs [ pir ] } { conform {
remark-cos | remark-policed-service } |
exceed { forward | drop } }*
ONFIGURATION
Description
-
Only basic or advanced
ACL and the rules are
applicable to
VLAN-ACL.
Required
-
VLAN-ACL is prohibited
from being applied to
the VLAN containing
MPLS intermixing ports.
Optional
Optional