Configuring An Acl To Support Renaming; Acl Configuration Example - Zte ZXR10 5900 Series User Manual

ZXR10 5900/5200 Series User Manual (Basic Configuration Volume)
Step Command
1
ZXR10(config)#
>|name <acl-name>}
2
ZXR10(config-std-acl)#
}{<source>[<source-wildcard>]|any}[time-range
<timerange-name>]
3
ZXR10(config-std-acl)#
<1-100><rule-description>
66 Confidential and Proprietary Information of ZTE CORPORATION
Configuring an ACL to Support
Renaming
To configure a name for ACL rule, use the following commands.
acl standard {number <acl-number
rule <1-100>{permit|deny
rule-description
Example: Define a standard ACL, permitting packets from net-
work segment 192.168.1.0/24 to pass through and denying pack-
ets whose source IP addresses are 192.168.1.100. Rule 1 and rule
2 can be configured different name.
ZXR10(config)#acl standard number 10
ZXR10(config-std-acl)#rule 1 deny 192.168.1.100 0.0.0.0
ZXR10(config-std-acl)#rule-description
ZXR10(config-std-acl)#rule 2 permit 192.168.1.0 0.0.0.255
ZXR10(config-std-acl)#rule-description
Note:
Currently only IPv4 standard ACL, IPv4 extended ACL, IPv4 hybrid
ACL and IPv4 layer 2 ACL support ACL renaming function.

ACL Configuration Example

A company has an Ethernet switch, to which users of both de-
partment A and department B and servers are connected. This is
shown in Figure 18. The relevant provisions as follows:
1. Users of both department A and department B are forbidden
to access the FTP server and the VOD server in work time
(9:00–17:00), but can access the Mail server at any time.
2. Internal users can access the Internet through proxy
192.168.3.100, but users of department A are forbidden to
access the Internet in work time.
3. General Managers of both department A and department B
(with their IP addresses as 192.168.1.100 and 192.168.2.100
respectively) may access the Internet and all servers at any
time.
The IP addresses of the servers are as follows:
Function
This enters ACL configuration
mode.
This configures the rules of
ACL.
This configures name for a
rule.
1 test1
2 test2