Example For Configuring A Layer 2 Acl - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
port link-type access
port default vlan 30
traffic-policy p_rd inbound
#
interface Ethernet0/0/4
port link-type access
port default vlan 100
#
return

10.5.3 Example for Configuring a Layer 2 ACL

Networking Requirements
As shown in
required that the ACL configured to prevent the packets with the source MAC address as 00e0-
f201-0101 and the destination MAC address as 0260-e207-0002 from passing through.
Figure 10-3 Networking diagram for configuring layer 2 ACLs
00e0-f201-0101
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
Issue 01 (2011-07-15)
Figure 10-3, the Switch that functions as the gateway is connected to the PC. It is
GE0/0/1
Configure the ACL.
Configure the traffic classifier.
Configure the traffic behavior.
Configure the traffic policy.
Apply the traffic policy to an interface.
ACL ID and rules
Name of the traffic classifier and classification rules
Name of the traffic behavior and actions
Name of the traffic policy, and traffic classifier and traffic behavior associated with the
traffic policy
Interface that a traffic policy is applied to
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
GE0/0/2
Switch
10 ACL Configuration
IP network
244