huawei(config)#
time-range time1 00:00 to 12:00 fri
huawei(config)#
acl 2000
huawei(config-acl-basic-2000)#
rule permit source 2.2.2.2 0.0.0.0 time-range time1
huawei(config-acl-basic-2000)#
rule deny time-range time1
huawei(config-acl-basic-2000)#
quit
huawei(config)#
packet-filter inbound ip-group 2000 port 0/1/0
huawei(config)#
save
3.13.2 Configuring the Advanced ACL for Packet Filtering
This topic describes how to classify traffic for the data packets according to the source IP address,
destination IP address, protocol type over IP, and features for protocol, such as source port of
the TCP, destination port of the TCP, and ICMP type of the data packets.
Context
The number of an advanced ACL is in the range of 3000-3999.
An advanced ACL can classify traffic according to the following information:
l
Protocol type
l
Source IP address
l
Destination IP address
l
Source port ID (source port of the UDP or TCP packets)
l
Destination port ID (destination port of the UDP or TCP packets)
l
ICMP packet type
l
Precedence value: priority field of the data packet
l
Type of service (ToS) value: ToS field of the data packet
l
Differentiated services code point (DSCP) value: DSCP of the data packet
Procedure
Step 1
(Optional) Set a time range.
Run the
time-range
command to create a time range, which can be used when an ACL rule is
created.
Step 2
Create an advanced ACL.
Run the
acl
command to create an advanced ACL, and then enter the acl-adv mode. The number
of an advanced ACL can only be in the range of 3000-3999.
Step 3
Configure a rule of the advanced ACL.
In the acl-adv mode, run the
rule
command to create an ACL rule. The parameters are as follows:
l
rule-id
: Indicates the ACL rule ID. To create an ACL rule with a specified ID, use this
parameter.
l
permit
: Indicates the keyword for allowing the data packets that meet related conditions to
pass.
l
deny
: Indicates the keyword for discarding the data packets that meet related conditions.
l
time-range
: Indicates the keyword of the time range during which the ACL rules are
effective.
Step 4
Activate the ACL.
SmartAX MA5616 Multi-service Access Module
Configuration Guide
3 Basic Configuration
Issue 04 (2011-10-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
113