packet-filter
Syntax
packet-filter { acl-number | name acl-name } { inbound | outbound }
undo packet-filter { acl-number | name acl-name } { inbound | outbound }
View
Layer 2 Ethernet interface view, VLAN interface view
Default level
2: System level
Parameters
acl-number: Specifies an IPv4 ACL by its number:
•
2000 to 2999 for IPv4 basic ACLs
3000 to 3999 for IPv4 advanced ACLs
•
4000 to 4999 for Ethernet frame header ACLs
•
name acl-name: Specifies an IPv4 ACL by its name. The acl-name argument takes a case-insensitive
string of 1 to 63 characters. It must start with an English letter.
inbound: Filters incoming packets.
outbound: Filters outgoing packets.
Description
Use packet-filter to apply an IPv4 basic, IPv4 advanced, or Ethernet frame header ACL to an interface
to filter packets.
Use undo packet-filter to restore the default.
By default, an interface does not filter packets.
Related commands: display packet-filter.
Examples
# Apply IPv4 ACL 2001 to filter incoming traffic on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] packet-filter 2001 inbound
packet-filter ipv6
Syntax
packet-filter ipv6 { acl6-number | name acl6-name } { inbound | outbound }
undo packet-filter ipv6 { acl6-number | name acl6-name } { inbound | outbound }
View
Layer 2 Ethernet interface view, VLAN interface view
Default level
2: System level
14