Huawei Quidway S5600 Series Operation Manual page 709

Operation Manual – ACL
Quidway S5600 Series Ethernet Switches-Release 1510
Note:
Only the commands related to the ACL configuration are listed below.
1) Define the time range
# Define the time range ranging from 8:00 to 18:00.
<Quidway> system-view
[Quidway] time-range test 8:00 to 18:00 daily
2) Define an ACL rule for packets with the source MAC address of 00e0-fc01-0101
and destination MAC address of 00e0-fc01-0303.
# Create ACL 4000.
[Quidway] acl number 4000
# Define an ACL rule to deny packets with the source MAC address of 00e0-fc01-0101
and destination MAC address of 00e0-fc01-0303, specifying the time range named test
for the ACL rule.
[Quidway-acl-ethernetframe-4000]
ffff-ffff-ffff dest 00e0-fc01-0303 ffff-ffff-ffff time-range test
[Quidway-acl-ethernetframe-4000] quit
3) Activate the ACL.
# Activate ACL 4000.
[Quidway] interface GigabitEthernet1/0/1
[Quidway-GigabitEthernet1/0/1] packet-filter inbound link-group 4000
1.9.4 User-Defined ACL Configuration Example
I. Network requirements
Create a user-defined ACL to deny all TCP packets within the time range from 8:00 to
18:00 everyday. Apply the ACL on GigabitEthernet1/0/1 port.
II. Network diagram
Figure 1-4 Network diagram for user-defined ACL configuration
III. Configuration procedure
To router
#1
Switch
Huawei Technologies Proprietary
1-21
Chapter 1 ACL Configuration
rule 1 deny source 00e0-fc01-0101