Operation Manual – ACLH3C S7500 Series Ethernet Switches Chapter 1 ACL Configuration1-23III. Configuration procedureNote:Only the commands related to the ACL configuration are listed below.1) Define the time range# Define a periodic time range that takes effect from 8:00 to 18:00 everyday. system-view[H3C] time-range test 8:00 to 18:00 daily2) Define an ACL for packets with the source IP address of 10.1.1.1.# Create ACL 2000 and enter ACL 2000 view.[H3C] acl number 2000# Define an access rule to deny packets with their source IP addresses being 10.1.1.1.[H3C-acl-basic-2000] rule 1 deny source 10.1.1.1 0 time-range test[H3C-acl-basic-2000] quit3) Apply the ACL on the port# Apply ACL 2000 on the port.[H3C] interface Ethernet2/0/1[H3C-Ethernet2/0/1] qos[H3C-qoss-Ethernet2/0/1] packet-filter inbound ip-group 20001.11.2 Advanced ACL Configuration ExampleI. Network requirementsDifferent departments of an enterprise are interconnected on the intranet through theports of a switch. The IP address of the wage query server is 192.168.1.2. Devices ofthe R&D department are connected to Ethernet2/0/1 of the switch. Apply an ACL todeny requests sourced from the R&D department and destined for the wage serverduring the working hours (8:00 to 18:00) of the working days.
