Link Acl Configuration Example - Huawei Quidway S5000 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches
[Quidway] acl name traffic-of-host basic
# Define the rules for packet which source IP is 10.1.1.1.
[Quidway-acl-basic-traffic-of-host] rule 1 deny ip source 10.1.1.1 0 time-range huawei
3) Activate ACL.
# Activate the ACL traffic-of-host .
[Quidway-GigabitEthernet0/1] packet-filter inbound ip-group traffic-of-host

1.3.3 Link ACL Configuration Example

I. Networking requirements
Using Link ACL, filter the packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303 during time range 8:00 ~ 18:00 every day.
The host is accessed through Gigabitethernet0/1.
II. Networking diagram
Figure 1-3 Access control configuration example
III. Configuration precedure
Note:
In the following configurations, only the commands related to ACL configurations are listed.
1) Define the time range
# Define time range from 8:00 to 18:00.
[Quidway] time-range huawei 8:00 to 18:00 daily
2) Define the ACL for packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303.
# Enter the named link ACL, named as traffic-of-link.
[Quidway] acl name traffic-of-link link
connect to Router
#1
Switch
1-9
Chapter 1 ACL Configuration