Assigning An Acl To A Port Group - 3Com WX3000 Series Operation Manual

To do...
Enter system view
Apply an ACL to a VLAN
Configuration example
# Apply ACL 2000 to VLAN 10 to filter the inbound packets of VLAN 10 on all the ports.
<device> system-view
[device] packet-filter vlan 10 inbound ip-group 2000

Assigning an ACL to a Port Group

Configuration prerequisites
Before applying ACL rules to a VLAN, you need to define the related ACLs. For information about
defining an ACL, refer to
Configuration procedure
Follow these steps to assign an ACL to a port group:
To do...
Enter system view
Enter port group view
Apply an ACL to the port
group
After an ACL is assigned to a port group, it will be automatically assigned to the ports that are
subsequently added to the port group.
Configuration example
# Apply ACL 2000 to port group 1 to filter the inbound packets on all the ports in the port group.
<device> system-view
[device] port-group 1
[device-port-group-1] packet-filter inbound ip-group 2000
Use the command...
system-view
packet-filter vlan vlan-id
inbound acl-rule
Configuring Basic ACL,
Use the command...
system-view
port-group group-id
packet-filter inbound acl-rule
1-10
—
Required
For description on the acl-rule
argument, refer to ACL Command.
Configuring Advanced ACL,
—
—
Required
For description on the acl-rule
argument, refer to ACL Command.
Remarks
Configuring Layer 2 ACL.
Remarks