beautypg.com

1 acl configuration, Acl overview, Introduction to acl – H3C Technologies H3C S7500E Series Switches User Manual

Page 11: Acl configuration

background image

1-1

1

ACL Configuration

This chapter includes these sections:

z

ACL Overview

z

ACL Configuration Task List

z

Configuring an ACL

z

Creating a Time Range

z

Configuring a Basic ACL

z

Configuring an Advanced ACL

z

Configuring an Ethernet Frame Header ACL

z

Copying an ACL

z

Displaying and Maintaining ACLs

z

ACL Configuration Examples

z

Unless otherwise stated, ACLs refer to both IPv4 and IPv6 ACLs throughout this document.

z

The S7500E Series Ethernet Switches are distributed devices supporting Intelligent Resilient

Framework (IRF). Two S7500E series can be connected together to form a distributed IRF device.

If an S7500E series is not in any IRF, it operates as a distributed device; if the S7500E series is in

an IRF, it operates as a distributed IRF device. For introduction of IRF, see IRF Configuration

Guide.

ACL Overview

This section covers these topics:

z

Introduction to ACL

z

Application of ACLs on the Switch

z

ACL Classification

z

ACL Numbering and Naming

z

Match Order

z

Implementing Time-Based ACL Rules

z

IPv4 Fragments Filtering with ACLs

Introduction to ACL

As network scale and network traffic are increasingly growing, network security and bandwidth

allocation become more and more critical to network management. Packet filtering can be used to