Wan-Acl Configuration Example - H3C S9500 Series Operating Manual

Operation Manual – QoS
H3C S9500 Series Routing Switches
If a WAN-ACL and a global ACL are applied at the same time, traffic will be
matched against the global ACL preferentially. If the global ACL is matched, the
WAN-ACL will not be matched.

8.3 WAN-ACL Configuration Example

I. Network requirements
As shown in
E1 interface of Switch B. Bundle timeslots 1 to 31 into a channel, and connect the two
devices using PPP. Switch B uses the clock of Switch A for reference. Switch B is
connected to the salary server. Configure WAN-ACL to prevent the traffic from Serial
8/1/1.1 from accessing the salary server during the working time.
II. Network diagram
Figure 8-1 Network diagram for WAN-ACL configuration
III. Configuration procedure
1) Configuration on Switch A
# Configure interface E1 7/1/1.
<H3C> system-view
[H3C] controller e1 7/1/1
[H3C-E17/1/1] clock master
[H3C-E17/1/1] channel-set 1 timeslot-list 1-31
[H3C] interface serial 7/1/1:1
[H3C-Serial7/1/1:1] ip address 202.117.1.1 24
2) Configuration on Switch B
# Configure interface E1 8/1/1.
<H3C> system-view
[H3C] controller E1 8/1/1
[H3C-E18/1/1] clock slave
[H3C-E18/1/1] channel-set 1 timeslot-list 1-31
Figure 8-1, use an E1 cable to connect an E1 interface of Switch A and an
Chapter 8 WAN-ACL Configuration
8-4