Configuring An Acl; Establishing The Configuration Task - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security

8.3 Configuring an ACL

This section describes how to create an ACL, set the time range, configure the description of an
ACL, configure basic ACLs, advanced ACLs, and Ethernet frame header ACLs, and set the step
of an ACL.
Context

8.3.1 Establishing the Configuration Task

8.3.2 Creating an ACL
8.3.3 (Optional) Setting the Time Range When an ACL Takes Effect
8.3.4 (Optional) Configuring the Description of an ACL
8.3.5 Configuring a Basic ACL
8.3.6 Configuring an Advanced ACL
8.3.7 Configuring a Frame Header-based ACL
8.3.8 (Optional) Setting the Step of an ACL
8.3.9 Checking the Configuration
8.3.1 Establishing the Configuration Task
Applicable Environment
ACLs can be used in multiple services, such as routing policies and packet filtering, to distinguish
the types of packets and process them accordingly.
Pre-configuration Tasks
None.
Data Preparation
To configure an ACL, you need the following data.
Issue 01 (2009-07-28)
NOTE
When the ACL is sent to the hardware and is imported by QoS to classify packets, the S9300 does not
l
process packets according to the action defined in the traffic behavior, if the packets does not match
the ACL rule.
When the ACL is imported by the upper-layer software and is used to control FTP login users, the
l
S9300 discards the packets, if the packets does not match the ACL rule.
NOTE
8.3.5 Configuring a Basic
Header-based ACL are optional and can be configured as required.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
ACL, 8.3.6 Configuring an Advanced
8 ACL Configuration
ACL, and 8.3.7 Configuring a Frame
8-3