Basic Acl Configuration Example - Huawei Quidway S3500 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches
Note:
In the following configurations, only the commands related to ACL configurations are
listed.
1) Define the work time range
# Define time range from 8:00 to 18:00.
[Quidway] time-range huawei 8:00 to 18:00 working-day
2) Define the ACL to access the payment server.
# Enter the named advanced ACL, named as traffic-of-payserver.
[Quidway] acl name traffic-of-payserver advanced match-order config
# Define the rules for other department to access the payment server.
[Quidway-acl-adv-traffic-of-payserver] rule 1 deny ip source any destination
129.110.1.2 0.0.0.0 time-range huawei
3) Activate ACL.
# Activate the ACL traffic-of-payserver .
[Quidway] packet-filter ip-group traffic-of-payserver

1.5.2 Basic ACL Configuration Example

I. Networking requirements
Using basic ACL, filter the packet which source IP address is 10.1.1.1 during time
range 8:00 ~ 18:00 every day.
II. Networking diagram
Figure 1-3 Access control configuration example
III. Configuration procedure
Note:
In the following configurations, only the commands related to ACL configurations are
listed.
connect to Router
#1
Switch
Huawei Technologies Proprietary
1-26
Chapter 1 ACL Configuration