Example For Configuring A Frame Header-Based Acl; Figure 8-3 Networking Diagram For Configuring Frame Header-Based Acls - Huawei Quidway S9300 Configuration Manual

8 ACL Configuration
port default vlan 20
traffic-policy p_rd inbound
#
interface GigabitEthernet1/0/3
port link-type access
port default vlan 30
traffic-policy p_rd inbound
#
interface GigabitEthernet2/0/1
port link-type access
port default vlan 100
#
return

8.6.3 Example for Configuring a Frame Header-based ACL

Networking Requirements
As shown in
required that the ACL configured to prevent the packets with the source MAC address as 00e0-
f201-0101 and the destination MAC address as 0260-e207-0002 from passing through.

Figure 8-3 Networking diagram for configuring frame header-based ACLs

Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
8-20
Figure 8-3, the S9300 that functions as the gateway is connected to the PC. It is
GE2/0/1
00e0-f201-0101
Configure the ACL.
Configure the traffic classifier.
Configure the traffic behavior.
Configure the traffic policy.
Apply the traffic policy to an interface.
ACL ID and rules
Name of the traffic classifier and classification rules
Name of the traffic behavior and actions
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
GE1/0/1
IP network
Configuration Guide - Security
Issue 01 (2009-07-28)