3Com Switch 7750 Configuration Guide Guide

ACL Configuration Example 611

# Define an access rule to deny packets with their source IP addresses being

10.1.1.1.

[SW7750-acl-basic-2000] rule 1 deny source 10.1.1.1 0 time-range test

[SW7750-acl-basic-2000] quit

3 Apply the ACL on the port

# Apply ACL 2000 on the port.

[SW7750] interface Ethernet 1/0/1

[SW7750-Ethernet1/0/1] qos

[SW7750-qoss-Ethernet1/0/1] packet-filter inbound ip-group 2000

Layer 2 ACL

Configuration Example

Network requirements

Through Layer 2 ACL configuration, packets with the source MAC address of

00e0-fc01-0101 and destination MAC address of 00e0-fc01-0303 are to be

filtered within the time range from 8:00 to 18:00 everyday. Apply this ACL on

Ethernet1/0/1 port.

Network diagram

Figure 154 Network diagram for Layer 2 ACL configuration

Configuration procedure

Only the commands related to the ACL configuration are listed below.

1 Define the time range

# Define the time range ranging from 8:00 to 18:00.

<SW7750> system-view

[SW7750] time-range test 8:00 to 18:00 daily

2 Define an ACL rule for packets with the source MAC address of 00e0-fc01-0101

and destination MAC address of 00e0-fc01-0303.

# Create ACL 4000.

[SW7750] acl number 4000

# Define an ACL rule to deny packets with the source MAC address of

00e0-fc01-0101 and destination MAC address of 00e0-fc01-0303, specifying the

time range named test for the ACL rule.