Acl Configuration Example; Advanced Acl Configuration Example - Huawei Quidway S3000-EI Series Operation Manual

Operation Manual - QoS/ACL
Quidway S3000-EI Series Ethernet Switches

1.3 ACL Configuration Example

1.3.1 Advanced ACL Configuration Example

I. Networking requirements
The interconnection between different departments on a
implemented through the 100M ports of the Ethernet Switch. The p
of the Financial Dept. is accessed via Ethernet1/1 (at
properly configure the ACL and limit the department other than the Office of President
access the payment query server betwee
129.111.1.2) can access the server without limitation.
II. Networking diagram
Office of President
129.111.1.2
Financial Department
subnet address
10.110.0.0
Figure 1-2 Access control configuration exampl
III. Configuration procedure
Note:
In the following configurations, only the comm
listed.
1) Define the work time range
# Define time range from 8:00 to 18:00.
[Quidway] time-range huawei
2) Define the ACL to access
# Enter the named advanced ACL, named as traffic-of-payserver.
[Quidway] acl name traffic-of-payserver advanced match-order config
Pay q uery server
129.11 0.1.2
#4
#3
#2
#1
Switch
Administration Department
subnet address
Connected to a router
10.120.0.0
8:00 to 18:00 working-day
the payment server.
Huawei Technologies Proprietary
1-10
Chapter 1 ACL Configuration
129.110.1.2). It is required to
n 8:00 and 18:00. The Office of President (at
e
ands related to ACL configurations are
company network is
ayment query server