Configuring An Acl; Establishing The Configuration Task - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
l

9.3 Configuring an ACL

This section describes how to create an ACL, set the time range, configure the description of an
ACL, , and set the step of an ACL.

9.3.1 Establishing the Configuration Task

Establishing the Configuration Task of ACL.
Applicable Environment
ACLs can be used in multiple services, such as routing policies and packet filtering, to distinguish
the types of packets and process them accordingly.
Pre-configuration Tasks
None.
Data Preparation
To configure an ACL, you need the following data.
No.
1
2
3
Issue 01 (2011-07-15)
NOTE
The S2700SI does not support hardware-based ACL applications.
Software-based application: When the ACL is imported by the upper-layer software, for
example, the ACL is imported when the control function is configured for login users, you
can use the ACL to control FTP, Telnet and SSH users. When the S2700 functions as a
TFTP client, you can configure an ACL to specify the TFTP servers that the S2700 can
access through TFTP.
When the ACL is imported by the upper-layer software, the packets matching the ACL are
processed by the S2700 according to the action deny or permit defined in the ACL. For
details on login user control, see the Quidway S2700 Series Ethernet Switches
Configuration Guide - Basic Configurations.
NOTE
l When the ACL is sent to the hardware and is imported by QoS to classify packets, the S2700 does not
process packets according to the action defined in the traffic behavior, if the packets does not match
the ACL rule.
l When the ACL is imported by the upper-layer software and is used to control FTP , Telnet or SSH
login users, the S2700 discards the packets, if the packets does not match the ACL rule.
Data
Number or name of the ACL
Name of the time range when the ACL takes effect, start time, and end time
Description of the ACL
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 ACL Configuration
158