Configuration example, Assigning an acl to a port group, Configuration prerequisites – H3C Technologies H3C S3100 Series Switches User Manual

Page 570: Configuration procedure, Assigning an acl to a port

Advertising
background image

1-13

Configuration example

# Apply ACL 2000 to VLAN 10 to filter the inbound packets of VLAN 10 on all the ports.

<Sysname> system-view

[Sysname] packet-filter vlan 10 inbound ip-group 2000

Assigning an ACL to a Port Group

Configuration prerequisites

Before applying ACL rules to a VLAN, you need to define the related ACLs. For information about

defining an ACL, refer to section

Configuring Basic ACL

, section

Configuring Advanced ACL

, section

Configuring Layer 2 ACL

, and section

Configuring an IPv6 ACL

.

Configuration procedure

Table 1-8 Assign an ACL to a port group

Operation

Command

Description

Enter system view

system-view

Enter port group view

port-group group-id

Apply an ACL to the port
group

packet-filter inbound
acl-rule

Required

For description on the acl-rule argument,
refer to ACL Command.

After an ACL is assigned to a port group, it will be automatically assigned to the ports that are

subsequently added to the port group.

Configuration example

# Apply ACL 2000 to port group 1 to filter the inbound packets on all the ports in the port group.

<Sysname> system-view

[Sysname] port-group 1

[Sysname-port-group-1] packet-filter inbound ip-group 2000

Assigning an ACL to a Port

Configuration prerequisites

Before applying ACL rules to a VLAN, you need to define the related ACLs. For information about

defining an ACL, refer to section

Configuring Basic ACL

, section

Configuring Advanced ACL

, section

Configuring Layer 2 ACL

, and section

Configuring an IPv6 ACL

.

Advertising