H3C S5500-SI Series Operation Manual

Operation Manual - ACL
H3C S5500-SI Series Ethernet Switches
Chapter 1 ACL Overview .............................................................................................................. 1-1
1.1 ACL Overview .................................................................................................................... 1-1
1.2 Time-Based ACL................................................................................................................ 1-1
1.3 IPv4 ACL............................................................................................................................ 1-1
1.3.1 IPv4 ACL Classification........................................................................................... 1-2
1.3.2 IPv4 ACL Match Order ............................................................................................ 1-2
1.3.3 IP Fragments Filtering with IPv4 ACL ..................................................................... 1-3
1.3.4 IPv4 ACL Creation .................................................................................................. 1-3
1.4 IPv6 ACL............................................................................................................................ 1-4
1.4.1 IPv6 ACL Classification........................................................................................... 1-4
1.4.2 IPv6 ACL Match Order ............................................................................................ 1-4
1.4.3 IPv6 ACL Creation .................................................................................................. 1-4
Chapter 2 IPv4 ACL Configuration .............................................................................................. 2-1
2.1 Creating a Time Range...................................................................................................... 2-1
2.1.1 Configuration Procedure ......................................................................................... 2-1
2.1.2 Configuration Example............................................................................................ 2-2
2.2 Configuring a Basic IPv4 ACL ........................................................................................... 2-3
2.2.1 Configuration Prerequisites..................................................................................... 2-3
2.2.2 Configuration Procedure ......................................................................................... 2-3
2.2.3 Configuration Example............................................................................................ 2-4
2.3 Configuring an Advanced IPv4 ACL .................................................................................. 2-4
2.3.1 Configuration Prerequisites..................................................................................... 2-5
2.3.2 Configuration Procedure ......................................................................................... 2-5
2.3.3 Configuration Example............................................................................................ 2-6
2.4 Configuring an Ethernet Frame Header ACL .................................................................... 2-6
2.4.1 Configuration Prerequisites..................................................................................... 2-6
2.4.2 Configuration Procedure ......................................................................................... 2-6
2.4.3 Configuration Example............................................................................................ 2-7
2.5 Displaying and Maintaining IPv4 ACLs.............................................................................. 2-8
2.6 IPv4 ACL Configuration Example ...................................................................................... 2-8
2.6.1 Network Requirements............................................................................................ 2-8
2.6.2 Network Diagram..................................................................................................... 2-8
2.6.3 Configuration Procedure ......................................................................................... 2-9
Chapter 3 IPv6 ACL Configuration .............................................................................................. 3-1
3.1 Configuring a Time Range................................................................................................. 3-1
3.2 Configuring a Basic IPv6 ACL ........................................................................................... 3-1
3.2.1 Configuration Prerequisites..................................................................................... 3-1

Table of Contents

i
Table of Contents