1-10To do… Use the command… RemarksEnter system view system-view —Apply an ACL to a VLAN packet-filter vlan vlan-idinbound acl-ruleRequiredFor description on the acl-ruleargument, refer to ACL Command.Configuration example# Apply ACL 2000 to VLAN 10 to filter the inbound packets of VLAN 10 on all the ports. system-view[device] packet-filter vlan 10 inbound ip-group 2000Assigning an ACL to a Port GroupConfiguration prerequisitesBefore applying ACL rules to a VLAN, you need to define the related ACLs. For information aboutdefining an ACL, refer to Configuring Basic ACL, Configuring Advanced ACL, Configuring Layer 2 ACL.Configuration procedureFollow these steps to assign an ACL to a port group:To do… Use the command… RemarksEnter system view system-view —Enter port group view port-group group-id —Apply an ACL to the portgroup packet-filter inbound acl-ruleRequiredFor description on the acl-ruleargument, refer to ACL Command.After an ACL is assigned to a port group, it will be automatically assigned to the ports that aresubsequently added to the port group.Configuration example# Apply ACL 2000 to port group 1 to filter the inbound packets on all the ports in the port group. system-view[device] port-group 1[device-port-group-1] packet-filter inbound ip-group 2000
