H3C Technologies H3C S3100 Series Switches - Manual (Page 575)

1-18
Network diagram
Figure 1-5 Network diagram for Layer 2 ACL
Configuration procedure
# Define a periodic time range that is active from 8:00 to 18:00 everyday.
system-view
[Sysname] time-range test 8:00 to 18:00 daily
# Define ACL 4000 to filter packets with the source MAC address of 0011-0011-0011 and the destination
MAC address of 0011-0011-0012.
[Sysname] acl number 4000
[Sysname-acl-ethernetframe-4000] rule 1 deny source 0011-0011-0011 ffff-ffff-ffff dest
0011-0011-0012 ffff-ffff-ffff time-range test
[Sysname-acl-ethernetframe-4000] quit
# Apply ACL 4000 on Ethernet 1/0/1.
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] packet-filter inbound link-group 4000
IPv6 ACL Configuration Example
Network requirements
PC 1 and PC 2 connect to the switch through Ethernet 1/0/1. The IP address of PC 1 is 3001::1/64.
Configure an ACL to filter packets that PC 1 sends to 3002::1/64 from 8:00 to 18:00 everyday.
Network diagram
Figure 1-6 Network diagram for IPv6 ACL configuration
Configuration procedure
# Define a periodic time range that is active from 8:00 to 18:00 everyday.