1-9# Apply rule 1 of advanced ACL 3000 and rule 2 of Layer 2 ACL 4000 on Ethernet 1/0/4 to filter inboundpackets. Here, it is assumed that the ACLs and their rules are already configured.[Sysname] interface Ethernet 1/0/4[Sysname-Ethernet1/0/4] packet-filter inbound ip-group 3000 rule 1 link-group 4000 rule 2After completing the above configuration, you can use the display packet-filter command to viewinformation about packet filtering.packet-filter vlanSyntaxpacket-filter vlan vlan-id { inbound | outbound } acl-ruleundo packet-filter vlan vlan-id { inbound | outbound } acl-ruleViewSystem viewParametersvlan-id: VLAN ID.inbound: Specifies to filter packets received by the ports in the VLAN.outbound: Specifies to filter packets to be transmitted by the ports in the VLAN.acl-rule: ACL rules to be applied, which can be a combination of the rules of multiple ACLs, as describedin Table 1-5.DescriptionUse the packet-filter vlan command to apply ACL rules on ports in a VLAN to filter packets.Use the undo packet-filter vlan command to remove the application of ACL rules on ports of a VLAN.Note that the packet-filter vlan command applies the ACL rules on all ports in a VLAN, allowing you toapply ACL rules to multiple ports in one operation.Examples# Apply all rules of basic ACL 2000 on all ports in VLAN 10 to filter inbound packets. Here, it is assumedthat the ACL and its rules and the VLAN are already configured. system-viewSystem View: return to User View with Ctrl+Z.[Sysname] packet-filter vlan 10 inbound ip-group 2000# Apply rule 1 of Layer 2 ACL 4000 on all ports in VLAN 20 to filter outbound packets. Here, it isassumed that the ACL and its rule numbered 1 and the VLAN are already configured.[Sysname] packet-filter vlan 20 outbound link-group 4000 rule 1# Apply rule 2 of user-defined ACL 5000 on all ports in VLAN 30 to filter inbound packets. Here, it isassumed that the ACL and its rule numbered 2 and the VLAN are already configured.[Sysname] packet-filter vlan 30 inbound user-group 5000 rule 2
