Operation Manual – ACLH3C S3100-52P Ethernet Switch Chapter 1 ACL Configuration1-17II. Network diagramSwitchEth1/0/1PC 10011-0011-0011PC 2To the routerFigure 1-5 Network diagram for Layer 2 ACLIII. Configuration procedure# Define a periodic time range that is active from 8:00 to 18:00 everyday. system-view[Sysname] time-range test 8:00 to 18:00 daily# Define ACL 4000 to filter packets with the source MAC address of 0011-0011-0011and the destination MAC address of 0011-0011-0012.[Sysname] acl number 4000[Sysname-acl-ethernetframe-4000] rule 1 deny source 0011-0011-0011ffff-ffff-ffff dest 0011-0011-0012 ffff-ffff-ffff time-range test[Sysname-acl-ethernetframe-4000] quit# Apply ACL 4000 on Ethernet 1/0/1.[Sysname] interface Ethernet1/0/1[Sysname-Ethernet1/0/1] packet-filter inbound link-group 40001.5.4 User-defined ACL Configuration ExampleI. Network requirementsAs shown in Figure 1-6, PC 1 and PC 2 are connected to the switch through Ethernet1/0/1 and Ethernet 1/0/2 respectively. They belong to VLAN 1 and access the Internetthrough the same gateway, which has an IP address of 192.168.0.1 (the IP address ofVLAN-interface 1).Configure a user-defined ACL to deny all ARP packets from PC 1 that use the gatewayIP address as the source address from 8:00 to 18:00 everyday.
