H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – ACL
H3C S7500 Series Ethernet Switches Chapter 1
ACL Configuration
1-22
1.10 Displaying ACL Configuration
To do… Use the command… Remarks
Display a time range or time
ranges
display time-range { all |
time-name }
Display the configured ACL
rule(s)
display acl config { all | acl-number
| acl-name }
Display the statistics
information about the
configured ACL rules
display acl config statistics
Display the remain ACL
resource of a specified slot
display acl remaining entry slot
slot-number
Display the ACL mode of
traffic flows
display acl mode
Display information about the
ACL rules applied to port(s)
display acl running-packet-filter
{ all | interface interface-type
interface-number }
Display the matching order of
the applied ACL rules
display acl order
These
commands
can be
executed in
any view.
1.11 ACL Configuration Examples
1.11.1 Basic ACL Configuration Example
I. Network requirements
Through basic ACL configuration, packets from the host with the source IP address of
10.1.1.1 (the host is connected to the switch through Ethernet 2/0/1) are to be filtered
within the time range from 8:00 to 18:00 everyday.
II. Network diagram
Switch
Eth2/0/1
PC1
10.1.1.1
PC2
To the router
Figure 1-1 Network diagram for basic ACL configuration