H3C S9500 Series Operating Manual page 70

Operation Manual – QoS
H3C S9500 Series Routing Switches
II. Network diagram
10.10.10.2/24
10.10.10.3/24
Figure 7-1 Network diagram for global ACL configuration
III. Configuration procedure
Note:
Only the commands related to the ACL configuration are listed below.
# Create a time range worktime covering the period from 8:00 to 18:00 during working
days.
<H3C> system-view
[H3C] time-range worktime 8:00 to 18:00 working-day
# Create and configure VLAN 10 and VLAN 11. Create VLAN interface 10 and VLAN
interface 11, and configure proper IP addresses for them, enabling PCs of the R&D
department to access the salary server of the HR department.
[H3C] vlan 10
[H3C-vlan10] port GigabitEthernet 2/1/1 to GigabitEthernet 2/1/4
[H3C-vlan10] quit
[H3C] interface Vlan-interface 10
[H3C-Vlan-interface10] ip address 10.10.10.1 255.255.255.0
[H3C-Vlan-interface10] quit
[H3C] vlan 11
[H3C-vlan11] port GigabitEthernet 3/1/1 to GigabitEthernet 3/1/5
[H3C-vlan11] quit
[H3C] interface Vlan-interface 11
[H3C-Vlan-interface11] ip address 10.11.11.1 255.255.255.0
[H3C-Vlan-interface11] quit
# Create and configure ACL 3000.
VLAN10
GE3/1/1
Chapter 7 Global ACL Configuration
VLAN11
Server
10.11.11.11/24
7-4