Activating Acl - 3Com 7700 Configuration Manual

192 C 7: Q S/ACL O
HAPTER O

Activating ACL

PERATION
The numbered interface ACLs can be identified with numbers ranging from 1000
to 1999.
Notes: The Switch 7700 does not have any Layer-3 physical interface but has
Layer-3 VLAN virtual interface. Therefore when the command line prompts for the
input interface type, you can only select Vlan-interface. Otherwise, the system will
display a failure message.
Interface ACL is only used to filter or classify the data treated by the software of
the switch.
Define Layer-2 ACL
The rules of Layer-2 ACL are defined on the basis of the Layer-2 information, such
as source MAC address, source VLAN ID, Layer-2 protocol type, Layer-2 packet
fomat, and destination MAC address.
Perform the following configuration in the designated view.
Table 7 Define Layer-2 ACL
Operation
Enter Layer-2 ACL view(from
system view)
Add a sub-item to the ACL(from
Layer-2 ACL view)
Delete a sub-item from the
ACL(from Layer-2 ACL view)
Delete one ACL or all the ACL(from
system view)
Layer-2 ACL can be identified with numbers ranging from 200 to 299.
Perform the following configuration in the interface view, from the QoS menu.
Table 8 Activate ACL
Operation
Activate an ACL
Deactivate an ACL
See the Switch 7700 Command Reference Guide for additional details.
Command
acl { number acl-number | name acl-name link } [
match-order { config | auto } ]
rule [ rule-id ] { permit | deny } [ protocol-type ] [
format-type ] ingress { [ source-vlan-id ] [ source-mac-addr
] | any } egress { [ dest-mac-addr ] [ destination-vlan-id ] |
any } [ time-range name ]
undo rule rule-id
undo acl { number acl-number | name acl-name | all }
Command
packet-filter inbound { [ ip-group { acl-number |
acl-name } [ rule rule ] ] | [ link-group { acl-number |
acl-name } [ rule rule ] ] }
undo packet-filter inbound { [ ip-group { acl-number |
acl-name } [ rule rule ] ] | [ link-group { acl-number |
acl-name } [ rule rule ] ] }