Configuration Examples; Example For Configuring A Basic Acl - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
<Quidway> display acl ipv6 name test
Advanced IPv6 ACL 3999 name test, 1 rule
rule 0 permit udp
# Run the display time-range command, and you can see the configuration and status of the
current time range.
<Quidway> display time-range all
Current time is 09:33:31 5-21-2009 Thursday
Time-range : time1 ( Inactive )
12:00 to 23:00 working-day

9.5 Configuration Examples

This section provides configuration examples of the ACL.

9.5.1 Example for Configuring a Basic ACL

Networking Requirements
As shown in
connected to the upstream router. It is required that the Switch does not trusts the packets from
user A whose IP address is 10.0.0.2/24.
Figure 9-1 Networking diagram for configuring a basic ACL
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
Issue 01 (2011-07-15)
Figure 9-1, GE 0/0/1 of the Switch is connected to the user, and GE 0/0/2 is
PC A
IP:10.0.0.2/24
GE0/0/1
Switch
PC B
Configure the ACL.
Configure the traffic classifier.
Configure the traffic behavior.
Configure the traffic policy.
Apply the traffic policy to an interface.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
GE0/0/2
9 ACL Configuration
169