H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 18)

11
Configuration procedure
# Create a time range from 08:00 to 18:00 every day.
system-view
[DeviceA] time-range study 8:00 to 18:00 daily
# Create IPv4 ACL 2009, and configure two rules in the ACL. One rule permits packets sourced from
Host A and the other denies packets sourced from any other host during the time range study.
[DeviceA] acl number 2009
[DeviceA-acl-basic-2009] rule permit source 192.168.1.2 0 time-range study
[DeviceA-acl-basic-2009] rule deny source any time-range study
[DeviceA-acl-basic-2009] quit
# Apply IPv4 ACL 2009 to filter incoming packets on GigabitEthernet 1/0/1.
[DeviceA] interface gigabitethernet 1/0/1
[DeviceA-GigabitEthernet1/0/1] packet-filter 2009 inbound
[DeviceA-GigabitEthernet1/0/1] quit
IPv6 packet filtering configuration example
Network requirements
As shown in Figure 2 , apply an IPv6 ACL to filter incoming traffic on GigabitEthernet 1/0/1 on Device
A so that everyday from 8:00 to 18:00 the interface allows only packets from Host A to pass through.
Figure 2 Network diagram for applying an IPv6 ACL to an interface for packet filtering
Configuration procedure
# Create a time range from 08:00 to 18:00 every day.
system-view
[DeviceA] time-range study 8:0 to 18:0 daily
# Create IPv6 ACL 2009, and configure two rules for the ACL. One permits packets sourced from Host
A and the other denies packets sourced from any other host during the time range study.
[DeviceA] acl ipv6 number 2009
[DeviceA-acl6-basic-2009] rule permit source 1001::2 128 time-range study
[DeviceA-acl6-basic-2009] rule deny source any time-range study
[DeviceA-acl6-basic-2009] quit
# Apply IPv6 ACL 2009 to filter incoming packets on GigabitEthernet 1/0/1.
[DeviceA] interface gigabitethernet 1/0/1
[DeviceA-GigabitEthernet1/0/1] packet-filter ipv6 2009 inbound
[DeviceA-GigabitEthernet1/0/1] quit