Planet XGS3-42000R User Manual page 462

Configuration result:
XGS 3-42000R#show firewall
Firewall Status: Enable.
Firewall Default Rule: Permit.
Switch #show access-lists
access-list 1100(used 1 time(s ))
access-list 1100 deny 00-12-11-23-00-00 00-00-00-00-ff-ff
any-destination-mac
untagged-802-3
access-list 1100 deny 00-12-11-23-00-00 00-00-00-00-ff-ff
any-destination-mac
Switch #show access-group int erface ethernet 1/10
interface name:Ethernet1/10
MAC Ingress access-list used is 1100,traffic-statistics Disable.
Scenario 3:
The configuration requirement is stated as below: The MA C address range of the net work connected to the
interface 10 of the switch is 00-12-11-23-xx-xx, and IP network is 10.0.0.0/ 24. FTP should be disabled and
ping requests from outside net work should be disabled.
Configuration description:
1． Create the corresponding access list.
2． Configure datagram filtering.
3． Bind the ACL to the relat ed interface.
The configuration steps are listed as below.
XGS 3-42000R(config)#access-list 3110 deny 00-12-11-23-00-00 00-00-00-00-ff-ff any-destination-mac tcp
10.0.0.0 0.0. 0.255 any-destination d-port 21
XGS 3-42000R(config)#access-list 3110 deny any-source-mac 00-12-11-23-00-00 00-00-00-00-ff-ff icmp
any-source 10.0.0.0 0.0.0.255
XGS 3-42000R(config)#firewall enable
XGS 3-42000R(config)#firewall default permit
XGS 3-42000R(config)#interface ethernet 1/10
XGS 3-42000R(config-If-Ethernet1/10)#mac-ip access-group 3110 in
XGS 3-42000R(config-Ethernet1/10)#exit
XGS 3-42000R(config)#exit
Configuration result:
XGS 3-42000R#show firewall
Firewall Status: Enable.
Firewall Default Rule: Permit.
XGS 3-42000R#show access-lists
46-18