After an ACL is configured, only an ACL is generated and the ACL does not take effect. You
need to run other commands to activate the ACL. Some common commands are as follows:
l
Run the
packet-filter
command to activate an ACL.
l
Perform the QoS operation. For details, see
3.14.3 Configuring Traffic Management Based
.
----End
Example
Assume that the service board of the MA5616 resides in slot 1 and belongs to a VLAN, and the
IP address of the VLAN L3 interface is 10.10.10.101. To prohibit the ICMP (such as ping) and
telnet operations from the user side to the VLAN interface on the device, do as follows:
huawei(config)#
acl 3001
huawei(config-acl-adv-3001)
rule 1 deny icmp destination 10.10.10.101 0
huawei(config-acl-adv-3001)
rule 2 deny tcp destination 10.10.10.101 0 destination-
port eq telnet
huawei(config-acl-adv-3001)
quit
huawei(config)#
packet-filter inbound ip-group 3001 rule 1 port 0/1/0
huawei(config)#
packet-filter inbound ip-group 3001 rule 2 port 0/1/0
huawei(config)#
save
3.13.3 Configuring the Link Layer ACL for Packet Filtering
This topic describes how to classify traffic according to the link layer information such as source
MAC address, source VLAN ID, L2 protocol type, and destination MAC address.
Context
The number of a link layer ACL is in the range of 4000-4999.
A link layer ACL can classify traffic according to the following link layer information:
l
Protocol type over Ethernet
l
802.1p priority
l
VLAN ID
l
Source MAC address
l
Destination MAC address
Procedure
Step 1
(Optional) Set a time range.
Run the
time-range
command to create a time range, which can be used when an ACL rule is
created.
Step 2
Create a link layer ACL.
Run the
acl
command to create a link layer ACL, and then enter the acl-link mode. The number
of a link layer ACL can only be in the range of 4000-4999.
Step 3
Configure a link layer ACL rule.
In the acl-link mode, run the
rule
command to create a link layer ACL rule. The parameters are
as follows:
SmartAX MA5616 Multi-service Access Module
Configuration Guide
3 Basic Configuration
Issue 04 (2011-10-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
114