3Com 5500 SI - Switch - Stackable, Configuration Manual

Page: 357 / 686

Brief Introduction to ACL 357
Configuration Procedure
In the following configurations, only the commands related to ACL configurations are
listed.
1 Define the work time range
Define time range from 8:00 to 18:00.
[SW5500] time-range 3Com 8:00 to 18:00 working-day
2 Define the ACL to access the payment server.
a Enter the numbered advanced ACL, number as 3000.
[SW5500] acl number 3000 match-order config
b Define the rules for other department to access the payment server.
[SW5500-acl-adv-3000] rule 1 deny ip source any destination 129.110.1.2
0.0.0.0 time-range 3Com
c Define the rules for the President’s Office to access the payment server.
[SW5500-acl-adv-3000] rule 2 permit ip source 129.111.1.2 0.0.0.0
destination 129.110.1.2 0.0.0.0
3 Activate ACL.
Activate the ACL 3000.
[SW5500-GigabitEthernet1/0/50] packet-filter inbound ip-group 3000
Basic ACL Configuration
Example
Networking Requirements
Using basic ACL, filter the packet whose source IP address is 10.1.1.1 during the time
range 8:00 ~ 18:00 every day. The host connects port GigabitEthernet1/0/50 of the
Switch.
Networking Diagram
Figure 89 Access Control Configuration Example
Configuration Procedure
In the following configurations, only the commands related to ACL configurations are
listed.
1 Define the time range
Define time range from 8:00 to 18:00.
[SW5500] time-range 3Com 8:00 to 18:00 daily
2 Define the ACL for packet which source IP is 10.1.1.1.
a Enter the number basic ACL, number as 2000.
Switch
#1
connect to Router