3 vlan-acl configuration example, Vlan-acl, Onfiguration – QTECH QSW-3400 Инструкция по настройке User Manual

Page 387: Xample

Advertising
background image

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1

386

no vacl mac access-group {<700-1199> |

WORD} {in | out} vlan WORD

3. Configure VLAN-ACL of MAC-IP

Command

Explanation

Global mode

vacl mac-ip access-group {<3100-3299> |

WORD} {in | out} [traffic-statistic] vlan WORD

no vacl mac-ip access-group {<3100-3299> |

WORD} {in | out} vlan WORD

Configure or delete MAC-IP VLAN-ACL.

(Egress filtering is not supported by switch.)

4. Configure VLAN-ACL of IPv6 type

Command

Explanation

Global mode

vacl ipv6 access-group (<500-699> | WORD)

{in | out} (traffic-statistic|) vlan WORD

no ipv6 access-group {<500-699> | WORD}

{in | out} vlan WORD

Configure or delete IPv6 VLAN-ACL.

(Egress filtering is not supported by

switch).This switch only supports the ipv6

standard acl.

5. Show configuration and statistic information of VLAN-ACL

Command

Explanation

Admin mode

show vacl [in | out] vlan [<vlan-id>]

Show the configuration and the statistic

information of VACL. (Egress filtering is not

supported by switch.)

6. Clear statistic information of VLAN-ACL

Command

Explanation

Admin mode

clear vacl [in | out] statistic vlan [<vlan-id>]

Clear the statistic information of VACL.

(Egress filtering is not supported by switch.)

51.3 VLAN-ACL Configuration Example

A company’s network configuration is as follows, all departments are divided by different

VLANs, technique department is Vlan1, finance department is Vlan2. It is required that

technique department can access the outside network at timeout, but finance department are

Advertising