Applying The Acl To The S9300; Establishing The Configuration Task; Configuring The Blacklist - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
10:00 to 12:00 daily
from 09:09 2008/9/9 to 23:59 2099/12/31

8.4 Applying the ACL to the S9300

This section describes the application of the ACL on the S9300.

8.4.1 Establishing the Configuration Task

8.4.2 Configuring the Blacklist

8.4.3 Configuring the Whitelist
8.4.4 Checking the Configuration
8.4.1 Establishing the Configuration Task
Applicable Environment
An ACL can be used in multiple services, such as routing policies and packet filtering, to process
different types of packets with different measures.
l
l
l
l
Pre-configuration Tasks
8.3 Configuring an ACL
Data Preparation
To apply an ACL to the S9300, you need the following data.
No.
1
8.4.2 Configuring the Blacklist
Issue 01 (2009-07-28)
When the S9300 finds an attack source on the network, the S9300 discards the packets that
have certain characteristics according to the ACL-based blacklist.
When the S9300 functions as an FTP server, you can configure an ACL to specify that only
the clients that meet certain conditions can access the S9300 to improve the security of the
S9300. For detailed configuration, see the Quidway S9300 Terabit Routing Switch
Configuration Guide - Basic Configuration.
When the S9300 functions as a TFTP client, you can configure an ACL to specify the TFTP
servers that the S9300 can access through TFTP. For detailed configuration, see the
Quidway S9300 Terabit Routing Switch Configuration Guide - Basic Configuration.
An ACL can also be applied to the traffic classification function. For the application of an
ACL in the traffic classification function, see the Quidway S9300 Terabit Routing Switch
Configuration Guide - QoS.
Data
ACL number
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 ACL Configuration
8-9