Activating Acl - Huawei Quidway S3500 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches
III. Defining the Layer-2 ACL
The rules of Layer-2 ACL are defined on the basis of the Layer-2 information such as
source MAC address, source VLAN ID, Layer-2 protocol type, Layer-2 ports receiving
and forwarding the packet and destination MAC address to process the data packets.
You can use the following command to define the numbered Layer-2 ACL.
Perform the following configuration in corresponding view.
Table 1-7 Defining the Layer-2 ACL
Enter Layer-2 ACL view(from
system view)
Add a sub-item to the ACL(from
Layer-2 ACL view)
Delete a sub-item from the
ACL(from Layer-2 ACL view)
Delete one ACL or all the
ACL(from system view)
Layer-2 ACL can be identified with numbers ranging from 4000 to 4999.
The interface in the above command specifies the Layer-2 interface, such as the
Ethernet port of a switch.

1.2.3 Activating ACL

The defined ACL can be active after activated globally on the switch. This function is
used to activate the ACL filtering or classify the data transmitted by the hardware of
switch.
You can use the following command to activate the defined ACL.
Perform the following configuration in system view.
Table 1-8 Activating ACL
Operation
Activate
ACL
Deactivate an
ACL
Operation
an packet-filter { ip-group { acl-number | acl-name } [ rule rule ] |
link-group { acl-number | acl-name } [ rule rule ] }
undo packet-filter { ip-group { acl-number | acl-name } [ rule
rule ] | link-group { acl-number | acl-name } [ rule rule ] }
Huawei Technologies Proprietary
Command
acl { number acl-number | name acl-name link }
[ match-order { config | auto } ]
rule [ rule-id ] { permit | deny } [ ingress
{ { source-vlan-id | source-mac-addr | interface
{ interface-name
interface-num } }* | any } ] [ egress
{ { destination-vlan-id | dest-mac-addr | interface
{ interface-name
interface-num } }* | any } ] [ time-range name ]
undo rule rule-id
undo acl { number acl-number | name
acl-name | all }
Command
1-8
Chapter 1 ACL Configuration
| interface-type
| interface-type