H3C Technologies H3C S3100 Series Switches - Manual (Page 557)

i
Table of Contents
1 ACL Configuration·····································································································································1-1
ACL Overview ·········································································································································1-1
ACL Matching Order························································································································1-1
Ways to Apply an ACL on a Switch·································································································1-2
Types of ACLs Supported by S3100 Series Ethernet Switches ·····················································1-3
ACL Configuration···································································································································1-3
Configuring Time Range··················································································································1-3
Configuring Basic ACL ····················································································································1-5
Configuring Advanced ACL ·············································································································1-6
Configuring Layer 2 ACL ·················································································································1-7
Configuring an IPv6 ACL ·················································································································1-8
ACL Assignment ···································································································································1-11
Assigning an ACL Globally ············································································································1-12
Assigning an ACL to a VLAN ········································································································1-12
Assigning an ACL to a Port Group ································································································1-13
Assigning an ACL to a Port ···········································································································1-13
Displaying ACL Configuration ···············································································································1-14
Example for Upper-Layer Software Referencing ACLs ········································································1-15
Example for Controlling Telnet Login Users by Source IP ····························································1-15
Example for Controlling Web Login Users by Source IP·······························································1-15
Example for Applying ACLs to Hardware······························································································1-16
Basic ACL Configuration Example ································································································1-16
Advanced ACL Configuration Example ·························································································1-17
Layer 2 ACL Configuration Example ·····························································································1-17
IPv6 ACL Configuration Example··································································································1-18
Example for Applying an ACL to a Port Group··············································································1-19