Displaying And Debugging Acl; Advanced Acl Configuration Example - 3Com 5500-SI Configuration Manual

356 C 19: ACL C
HAPTER
Displaying and
Debugging ACL
Advanced ACL
Configuration Example
ONFIGURATION
Table 367 Activate ACL
Operation
Activate an ACL
Deactivate an ACL undo packet-filter { inbound | outbound } { user-group
After the above configuration, execute
running of the ACL configuration, and to verify the effect of the configuration.
Execute command in User View to clear the statistics of the ACL module.
reset
Table 368 Display and Debug ACL
Operation
Display the status of the time range
Display the detail information about the
ACL
Display the information about the ACL
running state
Clear ACL counters
The matched information of
the Switch's CPU.
For syntax description, refer to the Command Reference Manual.
Networking Requirements
The interconnection between different departments on a company network is
implemented through the 1000 Mbps ports of the Switch. The IP address of the
payment query server of the Financial Dept. is 129.110.1.2. Financial Dept is accessed
using GigabitEthernet1/0/50. It is required to properly configure the ACL and limit
Financial Dept access to the payment query server between 8:00 and 18:00.
Networking Diagram
Figure 88 Access Control Configuration Example
Command
packet-filter { inbound | outbound } { user-group
acl_number [ rule rule ] | ip-group acl_number [ rule rule
[ link-group acl_number rule rule ] ] | link-group
acl_number [ rule rule ] }
acl_number [ rule rule ] | ip-group acl_number [ rule rule
[ link-group acl_number
acl_number [ rule rule ] }
display
Command
display time-range { all | name }
display acl { all | acl_number }
display packet-filter { interface {
interface_name | interface_type
interface_num } | unitid unit_id }
reset acl counter { all | acl_number }
display acl
Office of President
129.111.1.2
#3
#1
Switch
Financial Department
subnet address
Connected to a router
10.110.0.0
rule rule ] ] | link-group
command in all views to display the
command specifies the rules treated by
Pay query server
129.110.1.2
#4
#2
Administration Department
subnet address
10.120.0.0