1-11Assigning an ACL to a PortConfiguration prerequisitesBefore applying ACL rules to a VLAN, you need to define the related ACLs. For information aboutdefining an ACL, refer to Configuring Basic ACL, Configuring Advanced ACL, Configuring Layer 2 ACL.Configuration procedureFollow these steps to apply an ACL to a port:To do… Use the command… RemarksEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —Apply an ACL to the port packet-filter inbound acl-ruleRequiredFor description on the acl-ruleargument, refer to ACL Command.You cannot assign an ACL to a member port of a port group.Configuration example# Apply ACL 2000 to GigabitEthernet 1/0/1 to filter the inbound packets. system-view[device] interface GigabitEthernet 1/0/1[device-GigabitEthernet1/0/1] packet-filter inbound ip-group 2000Displaying and Maintaining ACLTo do… Use the command… RemarksDisplay a configured ACL or all the ACLs display acl { all | acl-number }Display a time range or all the time ranges display time-range { all |time-name }Display the information about packet filteringdisplay packet-filter { global |interface interface-typeinterface-number | port-group[ group-id ] | unitid unit-id | vlan[ vlan-id ] }Display information about remaining ACLresources display acl remaining entryAvailable inany view.
