User-Defined Acl Configuration Example - Huawei Quidway S3900 Series Operation Manual

Operation Manual – ACL
Quidway S3900 Series Ethernet Switches-Release 1510
# Define an ACL rule to deny packets with the source MAC address of 00e0-fc01-0101
and destination MAC address of 00e0-fc01-0303, specifying the time range named test
for the ACL rule.
[Quidway-acl-ethernetframe-4000]
ffff-ffff-ffff dest 00e0-fc01-0303 ffff-ffff-ffff time-range test
[Quidway-acl-ethernetframe-4000] quit
3) Activate the ACL.
# Activate ACL 4000.
[Quidway] interface GigabitEthernet1/1/1
[Quidway-GigabitEthernet1/1/1] packet-filter inbound link-group 4000

1.9.4 User-Defined ACL Configuration Example

I. Network requirements
Create a user-defined ACL to deny all TCP packets within the time range from 8:00 to
18:00 everyday. Apply the ACL on Ethernet1/0/1 port.
II. Network diagram
Figure 1-4 Network diagram for user-defined ACL configuration
III. Configuration procedure
Note:
Only the commands related to the ACL configuration are listed below.
1) Define the time range.
# Define the time range ranging from 8:00 to 18:00.
[Quidway] time-range aaa 8:00 to 18:00 daily
2) Create an ACL rule to filter TCP packets.
# Create ACL 5000.
[Quidway] acl number 5000
# Define a rule for TCP packets.
To router
#1
Switch
Huawei Technologies Proprietary
1-20
Chapter 1 ACL Configuration
rule 1 deny source 00e0-fc01-0101