Operation Manual – ACLH3C S7500E Series Ethernet Switches Chapter 2 IPv4 ACL Configuration2-102.7.2 Network DiagramEth2/0/4Eth2/0/1Eth2/0/2 Eth2/0/3192.168.4.1SwitchR&D department Marketing departmentSalary query serverPresident`s office192.168.2.0/24 192.168.3.0/24192.168.1.0/24Figure 2-1 Network diagram for IPv4 ACL configuration2.7.3 Configuration Procedure1) Create a time range for office hours# Create a periodic time range spanning 8:00 to 18:00 in working days. system-view[Switch] time-range trname 8:00 to 18:00 working-day2) Define an ACL to control access to the salary query server# Configure a rule to control access of the R&D Department to the salary query server.[Switch] acl number 3000[Switch-acl-adv-3000] rule deny ip source 192.168.2.0 0.0.0.255 destination192.168.4.1 0.0.0.0 time-range trname[Switch-acl-adv-3000] quit# Configure a rule to control access of the Marketing Department to the salary queryserver.[Switch] acl number 3001[Switch-acl-adv-3001] rule deny ip source 192.168.3.0 0.0.0.255 destination192.168.4.1 0.0.0.0 time-range trname[Switch-acl-adv-3001] quit3) Apply the IPv4 ACL# Configure class c_rd for packets matching IPv4 ACL 3000.[Switch] traffic classifier c_rd[Switch-classifier-c_rd] if-match acl 3000[Switch-classifier-c_rd] quit
