User-Defined Acl Configuration Example - Huawei Quidway S3500 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S3500 Series Ethernet Switches
1) Define the time range
# Define time range from 8:00 to 18:00.
[Quidway] time-range huawei 8:00 to 18:00 daily
2) Define the ACL for packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303.
# Enter the named link ACL, named as traffic-of-link.
[Quidway] acl name traffic-of-link link
# Define the rules for packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303.
[Quidway-acl-link-traffic-of-link] rule 1 deny ip ingress 00e0-fc01-0101 0-0-0 egress
00e0-fc01-0303 0-0-0 time-range huawei
3) Activate ACL.
# Activate the ACL traffic-of-link .
[Quidway] packet-filter link-group traffic-of-link

1.6.4 User-defined ACL Configuration Example

I. Networking requirements
Using user-defined ACL, filter the TCP packet during time range 8:00 ~ 18:00 every
day.
II. Networking diagram
Figure 1-8 Access control configuration example
III. Configuration procedure
Note:
In the following configurations, only the commands related to ACL configurations are
listed.
1) Define the time range
# Define time range from 8:00 to 18:00.
connect to Router
#1
Switch
Huawei Technologies Proprietary
1-31
Chapter 1 ACL Configuration