1-10Acl's step is 1rule 0 deny 06 ff 27Applying ACL Rules on PortsBy applying ACL rules on ports, you can filter packets on the corresponding ports.Configuration prerequisitesYou need to define an ACL before applying it on a port. For information about defining an ACL, refer toConfiguring Basic ACL, Configuring Advanced ACL, Configuring Layer 2 ACL, and ConfiguringUser-defined ACL.Configuration procedureFollow these steps to apply ACL rules on a port:To do... Use the command... RemarksEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —Apply ACL rules on theportpacket-filter { inbound |outbound } acl-ruleRequiredFor information about acl-rule, referto ACL Commands.Configuration example# Apply ACL 2000 on Ethernet 1/0/1 to filter inbound packets. system-view[Sysname] interface Ethernet 1/0/1[Sysname-Ethernet1/0/1] packet-filter inbound ip-group 2000Applying ACL Rules to Ports in a VLANBy applying ACL rules to ports in a VLAN, you can add filtering of packets on all the ports in the VLAN.Note:The ACL rules are only applied to ports that are in the VLAN at the time the packet-filter vlancommand is executed. In other words:z A port joining the VLAN later will not use the ACL rules for packet filtering.z A port leaving the VLAN later will keep using the ACL rules for packet filtering.Configuration prerequisitesBefore applying ACL rules to ports in a VLAN, you need to define the related ACLs. For informationabout defining an ACL, refer to Configuring Basic ACL, Configuring Advanced ACL, Configuring Layer 2ACL, and Configuring User-defined ACL.
