H3C S9500 Series Operation Manual page 1097

Operation Manual – QoS
H3C S9500 Series Routing Switches
Chapter 8 WAN-ACL Configuration
When configuring WAN-ACL, go to these sections for information you are interested in:
Overview
Configuring WAN-ACL
WAN-ACL Configuration Example
8.1 Overview
A WAN-ACL refers to an ACL applied to WAN interfaces. You can configure QACL
actions on a WAN interface to implement access control for the WAN interface. WAN
interfaces supporting WAN-ACL include channelized interfaces or MP-group interfaces
on CPOS and E1/T1 boards and ATM interfaces/subinterfaces operating in IPoA mode.
8.2 Configuring WAN-ACL
Follow these steps to configure WAN-ACL:
To do...
Enter system view
Create an ACL
and enter the ACL
view
Define ACL rules
for the ACL
Exit to system
view
Enter WAN
interface view
Use the command...
system-view
acl { number acl-number | name
acl-name [ advanced | basic | link ] }
[ match-order { config | auto } ]
rule
quit
interface interface-type
interface-number
8-1
Chapter 8 WAN-ACL Configuration
Remarks
—
Required
Required
You can configure
ingress
source-vlan-range in a
Layer-2 ACL.
However, the
configuration does not
take effect.
—
The WAN interface
can be a channelized
interfaces or MP-group
interfaces on a CPOS
or E1/T1 board, or an
ATM
interface/subinterface
operating in IPoA
mode.