Table 8-3 Configuration Data Of The Layer-2 Acl - Zte ZXA10 C300 Configuration Manual

Configuration Data
Table 8-3 lists the configuration data of the layer-2 ACL.

Table 8-3 Configuration Data of the Layer-2 ACL

Item
ACL number
Rule 1
Rule 2
Interface
Steps
1. In global configuration mode, create a layer-2 ACL.
ZXAN(config)#acl link number 200
ZXAN(config-link-acl)#
Note:
The layer ACL number ranges from 200 to 299. A layer-2 ACL can be applied to the
Ethernet interface and EPON-OLT interface.
2. Configure the ACL rules.
ZXAN(config-link-acl)#rule 1 deny any ingress 0000.0000.0001 0000.0000.0000
egress any
ZXAN(config-link-acl)#rule 2 permit any
ZXAN(config-link-acl)#exit
Note:
Each layer-2 ACL supports up to 4096 rules.
If the time range is not configured, the rule is always effective.
3. In Ethernet interface configuration mode, apply the ACL.
ZXAN(config)#interface gei_1/21/1
ZXAN(config-if)#ip access-group 200 in
4. (Optional) Query the ACL configuration.
ZXAN(config-if)#show acl 200
SJ-20130520164529-007|2013-06-30 (R1.0)
Data
200
Action: deny
Source MAC address: 0000.0000.0001
Protocol type: any
Permit any traffic
gei_1/21/1
8-5
ZTE Proprietary and Confidential
Chapter 8 ACL Configuration