Configuration Example Of The Acl - Huawei EGW2100 Web Configuration Manual

HUAWEI EGW2100
Web Configuration Guide
5
When planning the network, you need to use different policies to manage different users. In the
external network, only a specific user can access the internal server. In the internal network,
only a specific host can access the external network.
Networking Requirements
A EGW2100 is deployed at the network egress of the company.
l
l
l
l
Configuration requirement:
l
l
Networking Diagram
Figure 5-1
Issue 01 (2010-02-20)

Configuration Example of the ACL

The Ethernet1/0/0 interface is connected to the internal network of the company.
The Ethernet0/0/0 interface is connected to the Internet.
The company provides WWW, FTP, and Telnet services for external users. The network
segment of the internal network is 10.100.20.0/24.
The IP address of a specific external user is 202.39.2.3.
In the external network, only host 202.39.2.3 can access the internal FTP server, Telnet
server, WWW server.
In the internal network, only host 10.100.20.3 and host 10.100.20.4 can access the external
network.
shows the networking of the ACL configuration example.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 Configuration Example of the ACL
5-1