Configuration Examples; Example For Configuring A Basic Acl - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Example
# Run the display acl ipv6 command, and you can view the ACL6 number, rule IDs, and rule
contents.
<Quidway> display acl ipv6 2002
Basic IPv6 ACL 2002, 2 rules
rule 0 permit time-range time1
rule 1 permit
# Run the display acl ipv6 name command, and you can view the ACL6 name, ACL6 number,
rule quantity, and rule contents.
<Quidway> display acl ipv6 name test
Advanced IPv6 ACL 3999 name test, 1 rule
rule 0 permit udp
# Run the display time-range command, and you can see the configuration and status of the
current time range.
<Quidway> display time-range all
Current time is 09:33:31 5-21-2009 Thursday
Time-range : time1 ( Inactive )
12:00 to 23:00 working-day

10.5 Configuration Examples

This section provides configuration examples of the ACL.

10.5.1 Example for Configuring a Basic ACL

Networking Requirements
As shown in
connected to the upstream router. It is required that the Switch does not trusts the packets from
user A whose IP address is 10.0.0.2/24.
Figure 10-1 Networking diagram for configuring a basic ACL
Issue 01 (2011-07-15)
Figure 10-1, GE 0/0/1 of the Switch is connected to the user, and GE 0/0/2 is
PC A
IP:10.0.0.2/24
GE0/0/1
Switch
PC B
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
GE0/0/2
10 ACL Configuration
237