4-14 ACL Application for Packet FilteringWhen applying an ACL for packet filtering, go to these sections for information you are interested in:z Filtering IPv4 Packetsz Filtering IPv6 Packetsz ACL Application ExampleYou can apply an ACL to the inbound or direction of an Ethernet interface or VLAN interface to filterpackets:z Applied to an Ethernet interface, an ACL can filter all IPv4 packets and IPv6 packets that arereceived on the interface.z Applied to a VLAN interface, an ACL filters only Layer 3 packets that are needed to be forwardedthrough the VLAN interface.You can edit the rules in an applied ACL, such as add, remove, and modify rules, and the edited rulestake effect immediately.You can configure an interval for collecting and outputting packet filtering logs. The log informationincludes the number of matching packets and the ACL rules used.The system only logs traffic filtered by basic and advanced ACL rules with the logging keywordconfigured.Filtering IPv4 PacketsFollow these steps to apply an IPv4 ACL to an interface to filter IPv4 packets:To do… Use the command… RemarksEnter system view system-view —Enter Ethernetinterface viewinterface interface-typeinterface-numberEnterinterfaceview Enter VLANinterface viewinterface vlan-interfacevlan-idUse either commandApply a basic or advanced IPv4ACL to the interface to filterIPv4 packetspacket-filter { acl-number |name acl-name } inboundRequiredBy default, an interface doesnot filter IPv4 packets.
