3Com Switch 7750 Configuration Guide Guide

610 CHAPTER 57: ACL CONFIGURATION
<SW7750> system-view
[SW7750] time-range test 8:00 to 18:00 working-day
2 Define an ACL for filtering requests destined for the wage server.
# Create ACL 3000.
[SW7750] acl number 3000
# Define an ACL rule for requests destined for the wage server.
[SW7750-acl-adv-3000] rule 1 deny ip destination 192.168.1.2 255.
255.255.0 time-range test
[SW7750-acl-adv-3000] quit
3 Apply the ACL on a port.
# Apply ACL 3000 on the Ethernet 1/0/1 port.
[SW7750] interface Ethernet 1/0/1
[SW7750-Ethernet1/0/1] qos
[SW7750-qoss-Ethernet1/0/1] packet-filter inbound ip-group 3000
Basic ACL Configuration
Example
Network requirements
Through basic ACL configuration, packets from the host with the source IP address
of 10.1.1.1 (the host is connected to the switch through Ethernet1/0/1 port) are to
be filtered within the time range from 8:00 to 18:00 everyday.
Network diagram
Figure 153 Network diagram for basic ACL configuration
Configuration procedure
n
Only the commands related to the ACL configuration are listed below.
1 Define the time range
# Define the time range from 8:00 to 18:00.
<SW7750> system-view
[SW7750] time-range test 8:00 to 18:00 daily
2 Define an ACL for packets with the source IP address of 10.1.1.1.
# Enter ACL 2000.
[SW7750] acl number 2000
Switch
#1
To route
r