Operation Manual – ACLH3C S3100-52P Ethernet Switch Chapter 1 ACL Configuration1-15[Sysname] acl number 2001[Sysname-acl-basic-2001] rule 1 permit source 10.110.100.46 0[Sysname-acl-basic-2001] quit# Reference ACL 2001 to control users logging in to the Web server.[Sysname] ip http acl 20011.5 Examples for Applying ACLs to Hardware1.5.1 Basic ACL Configuration ExampleI. Network requirementsPC 1 and PC 2 connect to the switch through Ethernet 1/0/1. PC1’s IP address is10.1.1.1. Apply an ACL on Ethernet 1/0/1 to deny packets with the source IP address of10.1.1.1 from 8:00 to 18:00 everyday.II. Network diagramFigure 1-3 Network diagram for basic ACL configurationIII. Configuration procedure# Define a periodic time range that is active from 8:00 to 18:00 everyday. system-view[Sysname] time-range test 8:00 to 18:00 daily# Define ACL 2000 to filter packets with the source IP address of 10.1.1.1.[Sysname] acl number 2000[Sysname-acl-basic-2000] rule 1 deny source 10.1.1.1 0 time-range test[Sysname-acl-basic-2000] quit# Apply ACL 2000 on Ethernet 1/0/1.[Sysname] interface Ethernet1/0/1[Sysname-Ethernet1/0/1] packet-filter inbound ip-group 2000
