Basic Acl Configuration Example - Huawei Quidway S6500 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S6500 Series Ethernet Switches
# Enter the named advanced ACL, named as traffic-of-payserver.
[Quidway] acl name traffic-of-payserver advanced match-order config
# Define the rules for other department to access the payment server.
[Quidway-acl-adv-traffic-of-payserver] rule 1 deny ip source any destination
129.110.1.2 0.0.0.0 time-range huawei
# Define the rules for the Office of President to access the payment server.
[Quidway-acl-adv-traffic-of-payserver] rule 2 permit ip source 129.111.1.2 0.0.0.0
destination 129.110.1.2 0.0.0.0
3) Activate ACL.
# Activate the ACL traffic-of-payserver .
[Quidway-Ethernet2/0/1] qos
[Quidway-qoss-Ethernet2/0/1] packet-filter inbound ip-group traffic-of-payserver

1.3.2 Basic ACL Configuration Example

I. Networking requirements
Using basic ACL, filter the packet which source IP address is 10.1.1.1 during time
range 8:00 ~ 18:00 every day. The host connect port Ethernet2/0/1 of switch.
II. Networking diagram
Figure 1-2 Access control configuration example
III. Configuration precedure
Note:
In the following configurations, only the commands related to ACL configurations are
listed.
connect to Router
#1
Switch
Huawei Technologies Proprietary
1-13
Chapter 1 ACL Configuration