Figure 68 Acl Configuration Example - Zte ZXR10 2900 Series User Manual

F 68 ACL C
IGURE ONFIGURATION
Configuration of switch:
zte(cfg)#config acl hybrid number 300
zte(hybrid-acl-group)#rule 1 deny ip any 192.168.0.1 255.255.255.255
zte(hybrid-acl-group)#exit
zte(cfg)#set port 1-24 acl 300 enable
zte(cfg)#set time-range worktime range period 09:00 to 18:00 daily
zte(cfg)#set time-range worktime acl 300 rule 1 enable
Configuration detection:
/*after finishing the configuration, view ACL binding
state that all the ports are binding with ACL300.*/
zte(cfg)#show acl binding all
Id PortType AclNo
---- ---------- -
1 PhyPort
2 PhyPort
3 PhyPort
4 PhyPort
． ．
． ．
． ．
22 PhyPort 300
23 PhyPort
24 PhyPort
1. ACL is not available in the time-range of 18:00-24:00 and
0:00-9:00.
zte(cfg)#show time-range
/*show time-range configuration. The time range activity is passive*/
Supported time-range number: 32
Configured time-range number: 1
name
----------------
worktime
zte(cfg)#show acl config 300
/*show the detailed configuration of ACL 300. The ACL state
binding with time-range is passive.*/
Acl No : 300
Acl Name :
Acl Type : hybrid
Rule Number : 1
-----------------------------------------------------------------
RuleId : 1
Confidential and Proprietary Information of ZTE CORPORATION
Chapter 7 Service Configuration
E
XAMPLE
------
300
300
300
300
．
．
．
300
300
activity type
---------- --------
passive period
range
----------- ---------------
09:00 to 18:00 daily
155