Assigning An Acl To A Vlan - H3C S5100-SI Series Operation Manual

Operation Manual – ACL
H3C S5100-SI/EI Series Ethernet Switches
II. Configure procedure
Table 1-5 Assign an ACL globally
Operation
Enter system view
Assign an ACL
globally
III. Configuration example
# Apply ACL 2000 globally to filter the inbound packets on all the ports.
<Sysname> system-view
[Sysname] packet-filter inbound ip-group 2000

1.3.2 Assigning an ACL to a VLAN

I. Configuration prerequisites
Before applying ACL rules to a VLAN, you need to define the related ACLs. For
information about defining an ACL, refer to section
section 1.2.3 Configuring Advanced
II. Configuration procedure
Table 1-6 Assign an ACL to a VLAN
Operation
Enter system view
Apply an ACL to a
VLAN
Caution:
An ACL assigned to a VLAN takes effect only for the packets tagged with 802.1Q
header. For more information about 802.1Q header, refer to the VLAN part.
III. Configuration example
# Apply ACL 2000 to VLAN 10 to filter the inbound packets of VLAN 10 on all the ports.
Command
system-view
packet-filter inbound
acl-rule
ACL, section
Command
system-view
packet-filter vlan
vlan-id inbound
acl-rule
1-11
Chapter 1 ACL Configuration
Description
—
Required
For description on the acl-rule
argument, refer to ACL
Command.
1.2.2 Configuring Basic
1.2.4 Configuring Layer 2
Description
—
Required
For description on the acl-rule
argument, refer to ACL Command.
ACL,
ACL.