H3C LS-3100-52P-OVS-H3 Operation Manual page 1516

1 ACL Overview ············································································································································1-1
Introduction to ACL ·································································································································1-1
Introduction······································································································································1-1
Application of ACLs on the Switch ··································································································1-1
Introduction to IPv4 ACL ·························································································································1-2
IPv4 ACL Classification ···················································································································1-2
IPv4 ACL Naming ····························································································································1-2
IPv4 ACL Match Order ····················································································································1-3
IPv4 ACL Step ·································································································································1-4
Effective Period of an IPv4 ACL ······································································································1-4
IP Fragments Filtering with IPv4 ACL ·····························································································1-4
Introduction to IPv6 ACL ·························································································································1-5
IPv6 ACL Classification ···················································································································1-5
IPv6 ACL Naming ····························································································································1-5
IPv6 ACL Match Order ····················································································································1-5
IPv6 ACL Step ·································································································································1-6
Effective Period of an IPv6 ACL ······································································································1-6
2 IPv4 ACL Configuration ····························································································································2-1
Creating a Time Range ···························································································································2-1
Configuration Procedure··················································································································2-1
Configuration Example ····················································································································2-2
Configuring a Basic IPv4 ACL·················································································································2-2
Configuration Prerequisites ·············································································································2-2
Configuration Procedure··················································································································2-3
Configuration Example ····················································································································2-3
Configuring an Advanced IPv4 ACL ·······································································································2-4
Configuration Prerequisites ·············································································································2-4
Configuration Procedure··················································································································2-4
Configuration Example ····················································································································2-5
Configuring an Ethernet Frame Header ACL··························································································2-6
Configuration Prerequisites ·············································································································2-6
Configuration Procedure··················································································································2-6
Configuration Example ····················································································································2-7
Copying an IPv4 ACL······························································································································2-7
Configuration Prerequisites ·············································································································2-7
Configuration Procedure··················································································································2-7
Displaying and Maintaining IPv4 ACLs ···································································································2-8
IPv4 ACL Configuration Example ···········································································································2-8
Network Requirements ····················································································································2-8
Network Diagram·····························································································································2-8
Configuration Procedure··················································································································2-9
3 IPv6 ACL Configuration ····························································································································3-1
Creating a Time Range ···························································································································3-1
Table of Contents
i