H3C S5810 Series Operation Manual

Also see for S5810 Series: Quick start Quick start

Contents

H3C S5810 Series Operation Manual Manual pdf 555 page image

4-2ACL Application ExampleNetwork requirementsAs shown in Figure 4-1, apply an ACL to the inbound direction of interface GigabitEthernet 1/0/1 onDevice A so that the interface denies IPv4 packets sourced from Host A from 8:00 to 18:00 everyday.Figure 4-1 Network diagram for applying an ACL to an interface for filteringIP networkGE1/0/1Host A192.168.1.2/24Device AHost B192.168.1.3/24Configuration procedure# Create a time range named study, setting it to become active from 08:00 to 18:00 everyday. system-view[DeviceA] time-range study 8:00 to 18:00 daily# Create basic IPv4 ACL 2009.[DeviceA] acl number 2009# Create a basic IPv4 ACL rule to deny packets sourced from 192.168.1.2/32 during time range study.[DeviceA-acl-basic-2009] rule deny source 192.168.1.2 0 time-range study[DeviceA-acl-basic-2009] quit# Apply ACL 2009 to the inbound direction of interface GigabitEthernet 1/0/1.[DeviceA] interface gigabitethernet 1/0/1[DeviceA-GigabitEthernet1/0/1] packet-filter 2009 inbound