Displaying And Debugging Acl Configuration; Acl Configuration Examples - 3Com 4200G 12-Port Configuration Manual

210 C 26: ACL C
HAPTER
Configuration Example
Displaying and
Debugging ACL
Configuration
ACL Configuration
Examples
Advanced ACL
Configuration Example
ONFIGURATION
Apply ACL 2100 in the inbound direction on GigabitEthernet 1/0/1 to filter packets.
<S4200G> system-view
[4200G] interface gigabitethernet 1/0/1
[4200G-GigabitEthernet1/0/1] packet-filter inbound ip-group 2100
After the about-mentioned configuration, you can use the display command in any
view to view the ACL running information, so as to verify configuration result.
Table 183 Display and debug ACL configuration
Operation
Display the configured
ACL rule(s)
Display a time range or
time ranges
Display the application
information of packet
filtering
The matched information displayed by the display acl command is the matched
information process by the software of the switch. You can use the display
qos-interface traffic-statistic command to view the statistics information of data
forwarded by the hardware of the switch.
Network requirements
Different departments are interconnected on the intranet through the ports of the
Switch. The wage query server of the financial department is accessed through
GigabitEthernet1/0/1 (the subnet address is 129.110.1.2). It is required that an ACL
be correctly configured to prohibit access to the wage server by other departments
during the working hours (8:00 to 18:00).
Network diagram
Figure 61 Network diagram for advanced ACL configuration
Command
display acl { all | acl-number } The display command can be
display time-range { all |
time-name }
display packet-filter
{ interface interface-type
interface-num | unitid unit-id }
President's office
129.111.1.2
Switch
#4
#3
#1
Financial Dept
To router
Description
executed in any view
The display command can be
executed in any view
The display command can be
executed in any view
Wage server
129.110.1.2
#2
Administrative Dept