Planet XGS3-42000R User Manual page 461

The configuration steps are listed below:
XGS 3-42000R(config)#access-list 110 deny tcp 10.0.0.0 0.0.0.255 any-destination d-port 21
XGS 3-42000R(config)#firewall enable
XGS 3-42000R(config)#firewall default permit
XGS 3-42000R(config)#interface ethernet 1/10
XGS 3-42000R(config-If-Ethernet1/10)#ip access-group 110 in
XGS 3-42000R(config-If-Ethernet1/10)#exit
XGS 3-42000R(config)#exit
Configuration result:
XGS 3-42000R#show firewall
Firewall status: enable.
Firewall default rule: permit.
XGS 3-42000R#show access-lists
access-list 110(used 1 time(s))
access-list 110 deny tcp 10.0.0.0 0. 0.0.255 any-destination d-port 21
XGS 3-42000R#show access-group interface ethernet 1/10
interface name:Ethernet1/10
the ingress acl use in firewall is 110, traffic-statistics Disable.
Scenario 2:
The configuration requirement is stated as below: The switch should drop all the 802.3 datagram with
00-12-11-23-xx-xx as the source MAC address coming from interfac e 10.
Configuration description:
1． Create the corresponding access list.
2． Configure datagram filtering.
3． Bind the ACL to the relat ed interface.
The configuration steps are listed as below.
XGS 3-42000R(config)#access-list 1100 deny 00-12-11-23-00-00 00-00-00-00-ff-ff any-destination-mac
untagged-802-3
XGS 3-42000R(config)#access-list 1100 deny 00-12-11-23-00-00 00-00-00-00-ff-ff any tagged-802
XGS 3-42000R(config)#firewall enable
XGS 3-42000R(config)#firewall default permit
XGS 3-42000R(config)#interface ethernet 1/10
XGS 3-42000R(config-If-Ethernet1/10)#mac access-group 1100 in
XGS 3-42000R(config-If-Ethernet1/10)#exit
XGS 3-42000R(config)#exit
46-17