Operation Manual – ACLH3C S3100 Series Ethernet Switches Chapter 1 ACL Configuration1-11Operation Command DescriptionAssign an ACLgloballypacket-filter inboundacl-ruleRequiredFor description on the acl-ruleargument, refer to ACLCommand.III. Configuration example# Apply ACL 2000 globally to filter the inbound packets on all the ports. system-view[Sysname] packet-filter inbound ip-group 20001.3.2 Assigning an ACL to a VLANI. Configuration prerequisitesBefore applying ACL rules to a VLAN, you need to define the related ACLs. Forinformation about defining an ACL, refer to section 1.2.2 Configuring Basic ACL,section 1.2.3 Configuring Advanced ACL, section 1.2.4 Configuring Layer 2 ACL.II. Configuration procedureTable 1-6 Assign an ACL to a VLANOperation Command DescriptionEnter system view system-view —Apply an ACL to aVLANpacket-filter vlanvlan-id inboundacl-ruleRequiredFor description on the acl-ruleargument, refer to ACL Command.Caution:An ACL assigned to a VLAN takes effect only for the packets tagged with 802.1Qheader. For more information about 802.1Q header, refer to the VLAN part.III. Configuration example# Apply ACL 2000 to VLAN 10 to filter the inbound packets of VLAN 10 on all the ports. system-view[Sysname] packet-filter vlan 10 inbound ip-group 2000
