Configuring The Advanced Acl For Packet Filtering - Huawei SmartAX MA5616 Configuration Manual

SmartAX MA5616 Multi-service Access Module
Configuration Guide
huawei(config)#time-range time1 00:00 to 12:00 fri
huawei(config)#acl 2000
huawei(config-acl-basic-2000)#rule permit source 2.2.2.2 0.0.0.0 time-range time1
huawei(config-acl-basic-2000)#rule deny time-range time1
huawei(config-acl-basic-2000)#quit
huawei(config)#packet-filter inbound ip-group 2000 port 0/1/0
huawei(config)#save

3.13.2 Configuring the Advanced ACL for Packet Filtering

This topic describes how to classify traffic for the data packets according to the source IP address,
destination IP address, protocol type over IP, and features for protocol, such as source port of
the TCP, destination port of the TCP, and ICMP type of the data packets.
Context
The number of an advanced ACL is in the range of 3000-3999.
An advanced ACL can classify traffic according to the following information:
l
l
l
l
l
l
l
l
l
Procedure
Step 1 (Optional) Set a time range.
Run the time-range command to create a time range, which can be used when an ACL rule is
created.
Step 2 Create an advanced ACL.
Run the acl command to create an advanced ACL, and then enter the acl-adv mode. The number
of an advanced ACL can only be in the range of 3000-3999.
Step 3 Configure a rule of the advanced ACL.
In the acl-adv mode, run the rule command to create an ACL rule. The parameters are as follows:
l rule-id: Indicates the ACL rule ID. To create an ACL rule with a specified ID, use this
l permit: Indicates the keyword for allowing the data packets that meet related conditions to
l deny: Indicates the keyword for discarding the data packets that meet related conditions.
l time-range: Indicates the keyword of the time range during which the ACL rules are
Step 4 Activate the ACL.
Issue 04 (2011-10-30)
Protocol type
Source IP address
Destination IP address
Source port ID (source port of the UDP or TCP packets)
Destination port ID (destination port of the UDP or TCP packets)
ICMP packet type
Precedence value: priority field of the data packet
Type of service (ToS) value: ToS field of the data packet
Differentiated services code point (DSCP) value: DSCP of the data packet
parameter.
pass.
effective.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 Basic Configuration
113