H3C Technologies H3C S3100 Series Switches User Manual

Page 577

Advertising
background image

1-20

# Define an ACL to deny packets destined for the database server.

[Sysname] acl number 3000

[Sysname-acl-adv-3000] rule 1 deny ip destination 192.168.1.2 0 time-range test

[Sysname-acl-adv-3000] quit

# Create port group 1 and add Ethernet 1/0/1, Ethernet 1/0/2, and Ethernet 1/0/3 in the port group 1.

[Sysname] port-group 1

[Sysname-port-group-1] port Ethernet 1/0/1 to Ethernet 1/0/3

# Apply ACL 3000 to port group 1.

[Sysname-port-group-1] packet-filter inbound ip-group 3000

Advertising